The issue was caused by new AEGIS update driver. From our testing, SP3 does not seem to be affected so, the decision has been made to not deploy this to ActiveUpdate, but instead encourage affected customers to either apply the critical patch or SP3. The critical update is in effect the rolledback AEGIS driver. This is because we don’t want to affect those customers already on SP3 and keep them on the new driver.
There have been isolated cases where environments with SP3 applied have been affected - however a reboot of the end-point has resolved the issue 100% of the time.
Please reference the below KB for any customers / partners affected by this that might contact yourself. Support teams are also handling the incoming customer cases
http://esupport.trendmicro.com/4/Behavior-Monitoring-blocks-the-TMBMSRVexe-process.aspx
Customers who are using WFBS 6.0 Service Pack 1 or Service Pack 2 may get "Unauthorized changes blocked" messages for the TMBSRV.exe process. The following message will appear on the client machine:
Client/Server Security Agent has blocked the following programs to protect your computer. To unblock the programs, contact your administrator.
In the WFBS console, the customers are also getting an excessive Policy Violation of Behavior Monitoring due to the TMBSRV.exe process:
Solution:
________________________________________
To address the problem, please apply Critical Patch Build 3221. You can download it from the following links.
Alternatively, you can also update SP1 or SP2 to SP3. The installation packages and documentation can be found below:
WFBS 6.0 Advanced SP3 English
WFBS 6.0 Standard SP3 English
No comments:
Post a Comment
Hi there.
Thank you for your comment.
In the interest of cleanliness from comment spam that can occur I will be moderating posts to this blog.
Thank you again, and you will see your post on the site soon!
regs
Kieran
Note: Only a member of this blog may post a comment.