CB Defense: High CPU Usage when Sensor and Dell Data Protection Encryption are installed

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Procmon shows RepMgr.exe stuck performing Operation ReadFile repeatedly on same file, with a result of "success"
• Sensor logs also show the sensor performing constantly and repeatedly scanning the same file

RepUtilBackgroundScan: C:\MSOCache\All Users\{90150000-0115-0409-0000-0000000FF1CE}-C\pss10r.chm, filename length 73

 

Environment

• CB Defense Sensor 3.4.0.820 and Older
• Dell Data Protection Encryption (DDPE) 8.17.2 and Older

Cause

Known compatibility issue

Resolution

Dell addressed the issue and recommends upgrading to DDPE 8.18 or above