In some cases, the issue could be caused by the Transport Driver Interface (TmTDI). TDI is responsible for interfacing with the network traffic directly.
We recommend doing further isolation for this case. Do the following to confirm if TmTDI is causing the issue:
- Disable TmTDI by following these steps:
- Remove %SystemRoot%\system32\drivers\tmtdi.sys.
- Add a folder in %SystemRoot%\system32\drivers and name it "tmtdi.sys".
- Reboot the machine.
- After the reboot, unload OfficeScan (if the issue happens even when OfficeScan is unloaded).
- Check if TmTDI is not loaded using this command:
sc query tmtdi
The STATE should be STOPPED.
If the STATE is not STOPPED, verify if steps 1 and 2 are performed correctly. - Try to replicate the step and see if the issue occurs.
- After the test, remove the folder "tmtdi.sys" created in action and reboot.
OfficeScan will go back to normal.
If TmTDI is found to be the cause of the issue (issue does not occur with sc query tmtdi = stopped), then do the following:
- Open a command prompt and run as administrator.
- Enter this command:
netsh int tcp set global chimney=disabled
- Reload the OfficeScan client.
If the issue persists, use the Case Diagnostic Tool and generate logs pertaining to Scanning Issues and to Basic Information.