Summary
The TmListen.exe process is causing high CPU utilization on the machine. Installing the latest updates and patches does not fix the issue.
Upon checking the ofcdebug.log, you will see multiple lines containing the following:
2012 10/01 12:51:38 [09dc : 1d84] (00) (D) [-L-][tmlisten.exe][tmSendVirusLog] SendLogToServer(C:\Program Files (x86)\Trend Micro\OfficeScan Client\HLog\_r4303946.LOG) fail !! err = -99 , Discard this log... (0) - [cnttmlis_Service.cpp(10623)]
2012 10/01 12:51:38 [09dc : 1d84] (00) (D) [-L-][tmlisten.exe][tmSendVirusLog] dwRetryInterval=30 - [cnttmlis_Service.cpp(10586)]
2012 10/01 12:51:38 [09dc : 1d84] (00) (D) [-L-][tmlisten.exe][SendLogToServer] it's a wrong log file ! - [cnttmlis_Service.cpp(4291)]
2012 10/01 12:51:38 [09dc : 1d84] (00) (D) [-L-][tmlisten.exe][SendLogToServer] because sending virus log is fail, notify VirusLogMgr to remove it, bRet = 0. - [cnttmlis_Service.cpp(4369)]
The high CPU usage occurs when there are corrupted files in the ..\Trend Micro\OfficeScan Client\HLog directory. When the OfficeScan client/agent tries to send the corrupted logs to the OSCE server, the attempt fails.
There is high CPU usage because the client keeps on trying to send the corrupted files to the OfficeScan server, creating a loop.
To resolve this issue:
- Restart the machine in Safe Mode. Follow the steps in the Start the computer in safe mode Microsoft article.
- Go to the ..\Trend Micro\OfficeScan Client\HLog directory and delete all the files inside it.
- Restart the machine in Normal Mode.
The CPU utilization of the TmListen.exe process should return to normal.
If the issue persists, contact Trend Micro Technical Support.
