Workaround

This issue is caused by an enhancement implemented to the Apex One program inspection module to support environment with specialized applications.

However, it had a possible side effect of causing other applications to malfunction if DLP function is enabled.

On the affected endpoint:

1. Unload the Security Agent.
2. Run the Command Prompt as administrator, then issue the command "net stop tmumh" to stop the UMH engine.
3. Add a new DWORD registry key "RegCfgFlags" under [HKLM\SYSTEM\CurrentControlSet\Services\tmumh] and set its value to 1.
4. Run "net start tmumh" in the Command Prompt.
5. Restart the Security Agent.

This enhancement is normally not required for the majority of customers' environment, so disabling it would not cause any issues.

Recommendations

• Users are advised to install Critical Patch Build 9675 or higher (Workaround to manually create registry is no longer required).
• Apex One™ as a Service will address this issue on the upcoming December maintenance.

For support assistance, please contact Trend Micro Technical Support.