Endpoint Standard: Windows Server 2008 / Windows 7 crash caused by ctifile.sys

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Windows server crashes
• Memdump references ctifil.sys as the cause

Environment

• Endpoint Standard Sensor: 3.6.0.2076 - 3.7.1243
• Microsoft Windows Server 2008
• Microsoft Windows 7

Cause

There is a know issue with the sensor - DSEN-14950

Resolution

• Upgrade to the latest 3.7 sensor version
• As a workaround, downgrade sensor to version below 3.6.0.2076