App Control: Getting System Error Event "MESSAGE WITH STRING ID 616 HAS INVALID SUBTYPE(1022)"
search cancel

App Control: Getting System Error Event "MESSAGE WITH STRING ID 616 HAS INVALID SUBTYPE(1022)"

book

Article ID: 287269

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

  • Getting System error event "MESSAGE WITH STRING ID 616 HAS INVALID SUBTYPE(1022)".
  • Error emanating from endpoint that is on a higher version of App Control than the App Control server.

Environment

  • App Control Server: 8.1.4-8.1.6

Cause

Pertains to MSI files where the agent found data appended after the signature - the agent encountered a somewhat unexpected formatted MSI.

Resolution

Upgrade App Control Server to 8.1.8 or higher.

Additional Information

Please collect agent logs and contact Support to determine which MSI file(s) triggered the event, if desired.
Powered by Wolken Software