Knowledge Base

Support

Issues resolved by Service Pack 3 (SP3) for Worry-Free Business Security (WFBS) 6.0

Solution IDLast Updated
1056138Date : 2012/02/2 Time: 3:08 AM (PST)


Product/VersionPlatform
Worry-Free Business Security Standard/Advanced - 6.0
Windows - 2000 Server, 2000 Small Business Server, 2003 Home Server, 2003 Small Business Server, 2008 Essential Business Server, 2008 Standard Server Edition, 2008 Storage Server, Vista 32-bit, Vista 64-bit, XP Professional

Problem Description

This article discusses the list of issues resolved by Service Pack 3 (SP3) for WFBS 6.0.

Solution

Please click on any of the following categories for more information on the issues resolved in WFBS 6.0 SP3:

 

Performance Issues

Scanning, Detection and Filtering Issues

User Interface

Installation, Uninstallation and Upgrade

Crash / Hang Issues

Compatibility Issues

Purchasing, Product Registration and Licensing

Other Issues

 

 

 

Performance Issues

 

 

Web pages that are not security risks sometimes tend to be blocked.

When the Smart Query Filter is updating, clients may experience a performance issue.

Multiple "PccNtMon.exe" processes run simultaneously on terminal servers. This issue occurs because when the PccNtMon.exe detects the "RCS" registry key under the \HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc registry hive, it terminates its initialization thread but does not close.

Due to the increasing size of incremental updates to the Smart Scan Server, clients may experience performance issues when the Smart Query Filter is updating.

The MSA does not support some special characters in email addresses. This violates RFC standards.

60 days before the product license expires, users receive several daily notifications from the server stating that the product license has expired.

The Trend Micro Anti-Spam Toolbar threshold setting function does not work properly. The threshold can be set to "medium level" only.

The handle count in the TmPfw.exe process increases causing a memory shortage to occur. This triggers the "333", "1002", "1009", "1030", and "1058" event IDs to appear in the system log.

The computer performance may slow down significantly when users use Windows Explorer to browse through the CD/DVD drive and eject the CD/DVD.

 

 

back to top

 

 

Scanning, Detection and Filtering Issues

 

 

The DCE cleanup setting is not fully utilized.

Some malware can only be cleaned by the "Terminate" and "Clean" features of Behavior Monitor engine.  These two features are disabled in WFBS and cannot be manually enabled.

Client/Server Security Agents (CSAs) cannot install successfully on 64-bit operating systems after applying Service Pack 2 (standalone) to WFBS 6.0 or WFBS 6.0 SP1.

Only Mozilla Firefox 3.6 recognizes the NSC driver as an add-on.

WFBS 6.0 SP2 cannot exclude files from scans if the extension names are longer than six characters.

ScanMail/Messaging Security Agent (MSA) uses one third-party component to extract Microsoft Office/Adobe PDF documents for content scanning. However, when this component encounters some special samples, it stops unexpectedly or causes the server to stop responding. Both events stop the ScanMail for Exchange Master Service and Trend Micro Messaging Security Agent (MSA) Master Service.

After applying WFBS 6.0 SP 2 standalone to WFBS 6.0 SP1 on 64-bit operating systems, users may not be able to successfully install/update the CSAs.

The CSA configures blank proxy settings if the Internet Explorer proxy setting is checked and does not specify the proxy server information. As a result, the CSA cannot communicate with backend.

The page which Web Reputation Services (WRS) does not rate is blocked, and the blocked page is displayed with the status "Highly Suspicious".

 

 

back to top

 

 

User Interface

 

 

In Client/Server Messaging Security (CSM) 3.5 or earlier versions, Trend Micro Common Client Communication Service was installed as an interactive service. With this configuration, the console of the firewall install condition checker in WFBS 6.0 Service Pack 2 is visible.  The console will appear when CSA updating or firewall setting changed.

 

 

back to top

 

 

Installation, Uninstallation and Upgrade

 

 

On the Windows 2008 environment, the Worry-Free Remote Manager (WFRM) agent setting tool behaves abnormally when the User Account Control (UAC) is enabled.

WFBS 6.0 SP2 tags a new activation code as invalid even if the code works in Service Pack 1.

WFBS does not automatically remove the following third-party antivirus products:

 

o

AVG 7.0, 8.5 and 9.0Panda 

 

o

F-Secure Client Security 8.02

 

o

F-Secure Client Security 8.02

 

o

F-Secure Av Workstations 8.0

 

o

F-Secure Anti-Virus for Windows Workstations 9.00

 

o

Sunbelt Software VIPRE

 

o

Sunbelt Software Personal Firewall

 

o

Sunbelt Software CounterSpy

 

 

back to top

 

 

Crash / Hang Issues

 

 

Trend Micro Common Client Communication Service may stop responding unexpectedly if the relied REG key does not open successfully.

The CSA's ntrtscan process may crash when initial VSAPI and get pattern information.

The CSA's Trend Micro Behavior Monitoring driver may cause Blue Screen of Death (BSOD).

An issue causes the CSA (Tmlisten) to crash after few days of reinstalling it.

The iCRCHdler.dll file crashes when icrc.dat path contains a Unicode path.

The iCRCHdler.dll file crashes after "init" and "de-init" for more than 1088 times. The issue occurs because of the TLS memory leak in the third party library.

The iCRCHdler.dll file randomly crashes after "init" and "de-init" for a certain number of times. The issue occurs because of a running OpenSSL in multi-threadded environment.

ScanMail for Exchange unexpectedly stops when scanning specific PDF files.

In previous Scan Engine versions, there is a known InterOP issue with Microsoft Data Protection Manager 2010. This may cause the system to hang for 10 minutes during the operation of Microsoft Data Protection Manager.

BSOD occurs in WFBS 5.0.

 

 

back to top

 

 

Compatibility Issues

 

 

When users overwrite Excel 2007 files, temporary files are created but are not deleted promptly.

 

 

back to top

 

 

Purchasing, Product Registration and Licensing

 

 

Japanese license expiration notifications have the wrong subject.

 

 

back to top

 

 

Other Issues

 

 

Many of the URLs that are banned by the National Center for Missing and Exploited Children (NCMEC) are image files. Because image file types are included in the scan exclusion list, these banned URLs are not scanned and escape detection.

If there is only one gateway from the location awareness gateway list, users cannot delete the entry.

 

 

Some Windows NT event log records cannot be displayed correctly and the following message appears:

 

 

The description for Event ID <<EVENT ID>> from source Trend Micro Messaging Security Agent 5.1 cannot be found.

 

 

This issue occurs because the transport hook for the Messaging Security Agent (MSA) Exchange 2007 module records Windows NT events using an incorrect Windows NT event log source.

WFBS does not have a setting to disable the online/offline status checker.

Sometimes WFBS 6.0 blocks web pages that do not pose any security risk.

If the searchindexer.exe process holds the access rights to Excel temporary files on a Windows platform, users could not save Excel files.

Virus scan temporary files (VS*.*) in the ..<Client Server Security Agent>\Temp\ folder are not deleted automatically which is causing the disk space to be full.

The Security Server does not allow approved URLs with specified port numbers.

TrendProtect does not rate search results from the Yahoo (http://www.yahoo.co.jp) and Biglobe (http://www.biglobe.ne.jp) search engines.

WFBS should support auto-config (PAC) proxy type of Internet Explorer.

WFBS agents take about 60 minutes to send URL filter event logs to the server. As a result, the number of notifications may exceed the threshold before administrators receive the logs.

The Messaging Security Agent (MSA) database grows to be bigger than 2G. This causes Event ID 1105 and 1827 to appear in the Event Viewer with MSSQL$SCANMAIL resource.

When composing notification messages, the computer name buffer can be overwritten by improper memory operation because of a very long computer name.

The Trend Micro Security Server generates logs with identical event IDs in the Windows Event Log.

The TMProxy process approved list deployment feature is added.

 

 

back to top

 

 

 

 

To download the build, please click on the product and language version that applies to you:

 

 

WFBS Advanced

 

 

North America

Asia Pacific

United Kingdom

France

Italy

Germany

Spain

Russia

Rest of Europe, Middle East and Africa

 

 

WFBS Standard

 

North America

Asia Pacific

United Kingdom

France

Italy

Germany

Spain

Russia

Rest of Europe, Middle East and Africa

 

 

If you need technical assistance, contact Trend Micro Technical Support.




Related Information:

For configuration/installation walkthrough videos and articles, refer to the WFBS 6.0 Product page.


Rate this Solution
Did this article help you?  
 
Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on