CB Defense: Hash Deletion Request Shows File Name Missing Last Character
book
Article ID: 288689
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Hash for File was set for Malware Removal
Events found for Device with Description Text of "file not found"
File path named is missing 3rd character for file extension
Environment
CB Defense PSC Console: All Versions
CB Defense Sensor: 3.2.x.x and 3.3.x.x
Microsoft Windows: All Supported Versions
Cause
3.3 Sensor has a Bug tied to Malware Removal that drops the last character in file path for Malware Removal
Resolution
Upgrade to Sensor 3.4.0.562 or higher
Additional Information
While upgrading to 3.4 Sensor will resolve this issue, any Malware Removal actions that were sent to the Device will need to be resent. The error that is raised by the Bug will show the Sensor attempted the operation generating the Event in the Console for the File Not Found message.