Summary
A blue-screen of death (BSoD) may occur when there is an abnormal uninstallation of Titanium version 2011 or 2012 (i.e. uninstall fail or did not reboot) with Behavior Monitoring (BM) drivers left behind, and the you installed OfficeScan with BM enabled on the same machine.
This issue only happens when the uninstallation of Titanium 2011/2012 failed and the following BM drivers are left behind (version 3.x or 5.x) when installing OfficeScan with BM enabled:
- tmactmon.sys
- tmevtmgr.sys
- tmcomm.sys
Details
To resolve the BSoD issue:
- Log in to the machine in safe mode.
- Verify if the the following BM drivers file version in ..\system32\drivers and in the OfficeScan client folder are the same:
- tmactmon.sys
- tmevtmgr.sys
- tmcomm.sys
You can check the file version by opening Windows Explorer and right-clicking the file, select Properties > Version tab.
- If the versions are not the same, then manually delete the following BM drivers located in ..\system32\drivers folder:
- tmactmon.sys
- tmevtmgr.sys
- tmcomm.sys
- Reboot the machine in normal mode.
If the issue persists, please collect full memory dump and contact Trend Micro Technical Support for further assistance.
