Summary
You may encounter Deep Security Notifier service not being able to start or stop. The agent is version 20.0.0.7476+.
"Windows could not start the Trend Micro Deep Security Notifier service on Local Computer.
Error 1053: The service did not respond to the start or control request in a timely fashion."
Deep Security Agent (DSA) supports Notifier as Anti-Malware Protected Process Light (AM-PPL) service for Windows 10 and later desktop platforms from 20.0.0.7476+. This requires Deep Security Manager (DSM) version 20.0.789 to 833. Customers who deployed DSA version 20.0.0.7476+ may encounter issues on the Notifier service not being able to start, stop pending on an agent or agent upgrade failure. The root cause of this issue maybe related to the restart Notifier service when as AM-PPL. Trend Micro is still investigating this issue. To avoid the issue, this feature would be turned off in DSM 20 LTS October release.
To resolve this issue:
- Upgrade DSM to Oct release or disable enableWindowsNotifierAMPPL from DSM.
dsm_c -action changesetting -name com.trendmicro.ds.antimalware:settings.configuration.enableWindowsNotifierAMPPL -value "false"
- Back up registry.
- Disable selfprotect in DSA.
dsa_control.cmd -s 0
- Delete Notifier service registry key : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ds_notifier
- Reboot the machine.
- Reinstall DSA.
You may use this script (DelRegAndRestart.zip) for Step 2-4. Password is novirus.
If Step 3 fails, reboot the system in boot mode to delete the said registry key. Then reboot in normal mode to uninstall DSA.
