- Anti-Virus
This issue is normally caused by Anti-Virus. Please contact your systems administrator to create an exclusion for all Nimsoft Programs, e.g., exclude the <installPath>\Nimsoft directory and its contents from monitoring. If the probe is being blocked from starting, add an exclusion or 'approval' for the specific <probe>.exe
To confirm the cause of the problem/error, check the Windows Application event log on the robot machine where cdm is installed and you may see Informational messages. For example:
Notification displayed for target "c:\program files\nimsoft\nimsoft robot x64\probes\system\cdm\cdm.exe" and process "c:\program files\nimsoft\nimsoft robot x64\robot\controller.exe".
Bit9 Security Platform blocked an attempt by controller.exe to run cdm.exe because the file is not approved. If you require access to this file, please contact your system administrator. Scroll down for diagnostic data.
+ System
- Provider
[ Name] Cb Protection Agent Notifier
- EventID 22
[ Qualifiers] 16386
Level 4
Task 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2018-05-02T17:03:40.000000000Z
EventRecordID 301478
Channel Application
Computer xxxxxxxx.xxxxxx
- Security
[ UserID] S-1-5-18
- EventData
c:\program files\nimsoft\nimsoft robot x64\probes\system\cdm\cdm.exe
c:\program files\nimsoft\nimsoft robot x64\robot\controller.exe
Bit9 Security Platform blocked an attempt by controller.exe to run cdm.exe because the file is not approved. If you require access to this file, please contact your system administrator. Scroll down for diagnostic data. Source[c:\program files\nimsoft\nimsoft robot x64\robot\controller.exe] ProcessHash[012497ab6ad08a41ada7fc1c0b4dc1898c37f833195e3c8ba9e0138d2d8d1a66] ProcessPublisher[CA, Inc. (Valid[Yes] Trusted[No])] Cmd[controller.exe] ProcessFlags[WrittenFiles:HaveABInfo] KernelProcessFlags[LocalSystem:64Bit:LoadCheck:DepEnabled:LocalAdmin] Tags[Bit9:ATI:WinSystemConfig:InstalledProgs] Target[c:\program files\nimsoft\nimsoft robot x64\probes\system\cdm\cdm.exe] Notifier[Block] TargetHash[ba06833dff7be385218368b3a18964da450e5ab1379ffac67324d9f2c02cad13] TargetPublisher[CA, Inc. (Valid[Yes] Trusted[No])] Media[Fixed] Device[Unapproved:0x00000002] DeviceFlags[0x00000002] State[Unapproved] Flags[0x00000B42] Object[File] Rule[File and Path Execute: Unapproved Executables] List[1] Group[100] Id[28] Server[cbprotect.xxxxxxxxxxx:41002] Policy[xx_HighEnforcement_xxxxxxxx] Id[27] Version[0x00000000] CLVersion[274754] Enforcement[20:20:20] User[NT AUTHORITY\SYSTEM] Pid[1928] Tid[1932] Computer[xxxxxxxx] Domain[xxxxxxxx] Agent[8.0.0.2562 (Patch 6)] OS[Microsoft Windows Server 2008 R2 x64 Server Standard Service Pack 1 (6.1.7601)] DateTime[5/2/2018 12:03:40 PM]