Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Trend Micro Local Web Classification Server fails to start in OfficeScan

    • Updated:
    • 26 May 2014
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Standard
    • Windows 2008 Enterprise
    • Windows 2008 Standard
Summary
The following error occurs when Trend Micro Local Web Classification Server service is starting:
Trend Micro Local Web Classification Server service on Local Computer started and then stopped. Some services stop automatically if they have no work to do, for example, the Performance Logs and Alerts Service.
In the LWCS debug log file, it shows that there was a problem loading uniform resource locator (URL) pattern into memory while trying to start the service.
diagnostic.log ("failed to load pattern" error)
------------------------------------------------------
2012/08/24 11:12:22 Pacific Daylight Time [08040] [DEBUG] [lwcstmufe.cpp            ( 44)] [TMUFE-4-0] Try to update PTN_CACHE(3.026.05956) to PTN_CACHE(0.000.00000) in 'E:\Program Files (x86)\Trend Micro\OfficeScan\PCCSRV\LWCS\wcspatterns\cache\'
2012/08/24 11:12:22 Pacific Daylight Time [08040] [DEBUG] [lwcstmufe.cpp            ( 44)] [TMUFE-2-0] DB is empty, ignore pattern binary cache dump.
2012/08/24 11:12:22 Pacific Daylight Time [08040] [DEBUG] [lwcstmufe.cpp            ( 44)] [TMUFE-1-0] Fail to dump PTN_CACHE(0.000.00000) into 'E:\Program Files (x86)\Trend Micro\OfficeScan\PCCSRV\LWCS\wcspatterns\cache\', err=-413
2012/08/24 11:12:22 Pacific Daylight Time [08040] [DEBUG] [lwcstmufe.cpp            ( 44)] [TMUFE-2-0] No pattern loaded: skip purging any pattern file
2012/08/24 11:12:22 Pacific Daylight Time [08040] [ INFO] [lwcsconductor.cpp        (272)] Pattern version: 0
2012/08/24 11:12:22 Pacific Daylight Time [08040] [ INFO] [lwcsconductor.cpp        (275)] Failed to load pattern, the version number is zero
2012/08/24 11:12:22 Pacific Daylight Time [08040] [ERROR] [LWCSService.cpp          (467)] LWCSConductor failed to init(3).
2012/08/24 11:12:22 Pacific Daylight Time [08040] [DEBUG] [NTService.cpp            (206)] [CNTService::SetStatus()]
2012/08/24 11:12:22 Pacific Daylight Time [08040] [DEBUG] [lwcsbwcache.cpp          ( 26)] BWCache dtor
------------------------------------------------------
Further investigation reveals that the C:\Program Files (x86)\Trend Micro\OfficeScan\PCCSRV\LWCS\wcspatterns\ directory is missing the full pattern file “Url00000.xxx” which is used when loading URL pattern into memory during service startup.
------------------------------------------------------
[C:\Program Files (x86)\Trend Micro\OfficeScan\PCCSRV\LWCS\wcspatterns\]
2012/08/20  11:37        <DIR>        cache
2010/05/13  20:56                   0 placeholder.txt                         
2012/08/20  17:03           141537032 Url05956.026                            
------------------------------------------------------
Details
Public
To resolve this, do the following:
  1. Open the ..\PCCSRV\LWCS\wcspatterns folder.
  2. Except for the cache directory and placeholder.txt file, delete all the remaining files. 
  3. Open the ..\PCCSRV\LWCS\wcspatterns\cache\ folder and delete the UrlPtnCache.bin file.
  4. Download the Web Reputation Service URL pattern file:
    1. Access the server.ini file from Trend Micro ActiveUpdate Server using either of the following links:
    2. Using Notepad, take note of the Full Pattern file value found in the "[PATTERN]" section of the server.ini.
      For example:
      [PATTERN]
      P.48040033=pattern/Url00000.027.zip,2700000,106971337  ==> where value of full pattern is "Url00000.027.zip".
    3. Open Internet browser and download the URL pattern by following the URL format shown below:
      http://osce106-ilspn25wr-p.activeupdate.trendmicro.com/activeupdate/pattern/<full pattern.zip>
      For example:
      • For OfficeScan 10.6: http://osce106-ilspn25wr-p.activeupdate.trendmicro.com/activeupdate/pattern/Url00000.027.zip
      • For OfficeScan 10.5: http://osce105-ilspn20wr-p.activeupdate.trendmicro.com/activeupdate/pattern/Url00000.027.zip
  5. Extract the content of the zip file into the ..\PCCSRV\LWCS\wcspatterns folder.
  6. Start the Trend Micro Local Web Classification Server service.

If the issue still occurs:
  1. Download and run the CDT utility on the problematic host machine.
  2. Collect the CDT logs and send them to Trend Micro Technical Support
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1061129
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.