CB Defense: Hash Deletion Request Shows File Name Missing Last Character

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Hash for File was set for Malware Removal
• Events found for Device with Description Text of "file not found"
• File path named is missing 3rd character for file extension

Environment

• CB Defense PSC Console: All Versions
• CB Defense Sensor: 3.2.x.x and 3.3.x.x
• Microsoft Windows: All Supported Versions

Cause

3.3 Sensor has a Bug tied to Malware Removal that drops the last character in file path for Malware Removal 

Resolution

Upgrade to Sensor 3.4.0.562 or higher

Additional Information

While upgrading to 3.4 Sensor will resolve this issue, any Malware Removal actions that were sent to the Device will need to be resent. The error that is raised by the Bug will show the Sensor attempted the operation generating the Event in the Console for the File Not Found message.