Microsoft Visual C++ Redistributable vcredist_x86.exe installer fails.

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

When trying to install Microsoft Visual C++ Redistributable 2005 or 2008 the installation fails while the Carbon Black Cloud sensor is in enforcement. Only when the sensor is place into BYPASS mode will the installation complete. This appears to be an interoperability issue between the two products.

Environment

• Carbon Black Cloud Endpoint Standard: Current Version
• Carbon Black Cloud Enterprise EDR: Current Version
• Carbon Black Cloud Windows Sensor: 4.x and Higher
• Microsoft Windows OS: All Supported Versions

Cause

Carbon Black Cloud sensor is having an interop failure with the "C:\WINDOWS\winsxs**\TiWorker.exe" process that is part of the Microsoft Visual C++ Redistributable vcredist_x86.exe installation.

Resolution

As a workaround, assign affected endpoints to a specific sensor policy where an All Reporting and Sensor Operations Exclusion can be added for the following process:

**\Windows\WinSxS\**\TiWorker.exe

Additional Information

Carbon Black Engineering determined that this exclusion should be relatively safe to apply in this situation and can be used for those affected endpoints. The 4.1.0 Windows Sensor that is due in Q4 2025 will also have some improvements that might make this exclusion rule unnecessary.