Summary
Activity Monitoring in Cloud One – Endpoint & Workload Security is used to forward information to Trend Micro Vision One / XDR platform. This module works with the tmumh driver to inject DLLs into processes and utilizes the Anti-Malware scan exclusion list. When Activity Monitoring module is enabled and tmumh driver is running, Veritas Netbackup fails to do its backup job even if it is added in the Anti-Malware module scan exclusions.
-----------------application log-----------------
** Error bpbrm (pid=190019) socket read failed: errno = 104 - Connection reset by peer
Info bpbkar (pid=0) done. status: 13: file read failed
end writing
file read failed (13)
--------------------------------------------------
Process "bpbkar32.exe" produces a dump file with exception caused by a third-party module MfApHook64.dll which is managed by "Citrix Systems, Inc.". This case is an inter-op issue between our UMH module and "MfApHook64" module.
To resolve the issue, disable the Citrix API hooks to prevent their DLL from loading into the affected processes to bypass the inter-op issue. You may refer to the procedure from this Citrix article: How to Disable Citrix API Hooks on a Per-application Basis.