Carbon Black Cloud: Application fails to launch with error message box that displays the message "Internal Error 00000012"

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

3rd party applications will display the message "Application Error 00000012" when CBC sensor is not in bypass

Environment

• Carbon Black Cloud Console: Current Version
• Carbon Black Cloud Windows Sensor: 3.9 MR1 or Lower
• Windows OS: All Supported Versions

Cause

The sensor was not calling DetourRestoreAfterWith in the DllMain DLL_PROCESS_ATTACH call of ctiuser.dll, which is causing the 3rd party application to not start after the ctiuser.dll injection.

Resolution

Issue was resolved in 3.9 MR2 (3.9.2.2698) sensor release.