Below is the log snippet from the ofcdebug.log file in the WFBS_Debug folder:
2020 01/27 17:17:50 [3128 : 1c44] (00) (E) [-IPC-][instreg.exe]COIPCObj::InitIPCListenPort - MapViewOfFile failed with Windows error code: [183]. - [oipcobj.cpp(399)] 2020 01/27 17:17:50 [3128 : 1c44] (00) (E) [][instreg.exe]CommonClientUtility::CRegistryController::GetValueString - CRegKey::Open failed with Windows error code:[2]. - [ccutil_registrycontroller.cpp(54)] 2020 01/27 17:18:58 [3128 : 1c44] (00) (E) [][instreg.exe]COfcDigitalSignatureManager::VerifyFileWithDatFHS - failed to check digital signature for C:\Program Files (x86)\Trend Micro\Security Agent\Temp\CCSF\CCSF\module\scan\tmel.sys, err=536876103 - [ds_ofcdsmanager.cpp(578)] 2020 01/27 17:18:58 [3128 : 1c44] (00) (E) [][instreg.exe]COfcDigitalSignatureManager::VerifyFileWithDatFHS - failed to check digital signature for C:\Program Files (x86)\Trend Micro\Security Agent\Temp\CCSF\CCSF\module\TrxHandler\libcurl.dll, err=-2146762479 - [ds_ofcdsmanager.cpp(578)] 2020 01/27 17:19:02 [3128 : 1c44] (00) (E) [][instreg.exe]COfcDigitalSignatureManager::VerifyFileWithDatFHS - failed to check digital signature for C:\Program Files (x86)\Trend Micro\Security Agent\Temp\CCSF\CCSF\module\BES\firefoxextension\core\TmBpFfCore.dll, err=-2146762479 - [ds_ofcdsmanager.cpp(578)] 2020 01/27 17:19:03 [3128 : 1c44] (00) (F) [][instreg.exe]CInstregApp::InitInstance - Bypass CCSF package since it failed to check package integrity. - [instreg_instreg.cpp(860)] 2020 01/27 17:19:03 [3128 : 1c44] (00) (F) [-IPC-][instreg.exe][PFW][ReceiveStop] PipeServer is not initialed. RC[0x1000000A] - [oipcobj.cpp(1112)] 2020 01/27 17:19:03 [3128 : 1c44] (00) (E) [-IPC-][instreg.exe][PFW][ReceiveStop] <--- RC[0x1000000A] - [oipcobj.cpp(1113)] 2020 01/27 17:19:04 [2508 : 1408] (00) (E) [-IPC-][InstReg.exe]COIPCObj::InitIPCListenPort - MapViewOfFile failed with Windows error code: [183]. - [oipcobj.cpp(399)] 2020 01/27 17:19:04 [2508 : 1408] (00) (F) [-IPC-][InstReg.exe][PFW][ReceiveStop] PipeServer is not initialed. RC[0x1000000A] - [oipcobj.cpp(1112)] 2020 01/27 17:19:04 [2508 : 1408] (00) (E) [-IPC-][InstReg.exe][PFW][ReceiveStop] <--- RC[0x1000000A] - [oipcobj.cpp(1113)]
Below is the log snippet within wofie_install from the WFBS_Debug folder:
From Process Monitor, the following lines can be found:
To resolve this isolated issue:
- Open Certificate Manager from the machine.
- Navigate to Untrusted Certificates > Certificates.
- Look for Trend Micro, Inc. certificates if present. This includes SHA256 and SHA1 certificates.
- Remove certificates under Untrusted Certificates.
- Utilize EasyFix for System Certificates Tool. You may use the command EasyFixSysCerts.exe A1.
- Uninstall the Security Agent remnants. You can make use of the uninstall tool or manually delete the security agent files.
- Reinstall the Security Agent.