Workaround
This issue is caused by an enhancement implemented to the Apex One program inspection module to support environment with specialized applications.
However, it had a possible side effect of causing other applications to malfunction if DLP function is enabled.
On the affected endpoint:
- Unload the Security Agent.
- Run the Command Prompt as administrator, then issue the command "net stop tmumh" to stop the UMH engine.
- Add a new DWORD registry key "RegCfgFlags" under [HKLM\SYSTEM\CurrentControlSet\Services\tmumh] and set its value to 1.
- Run "net start tmumh" in the Command Prompt.
- Restart the Security Agent.
This enhancement is normally not required for the majority of customers' environment, so disabling it would not cause any issues.
Recommendations
- Users are advised to install Critical Patch Build 9675 or higher (Workaround to manually create registry is no longer required).
- Apex One™ as a Service will address this issue on the upcoming December maintenance.
For support assistance, please contact Trend Micro Technical Support.