Backing up using Symantec Backup Exec 12.5 is slow

Solution ID Last Updated
1055309 Jun. 18, 2014 1:37 AM (PST)

Product / Version Platform
OfficeScan - 10.0, 10.5, 10.6;11.0;Worry-Free Business Security Standard/Advanced - 6.0;
Windows - 2003 Datacenter Server, 2003 Enterprise Server, 2003 Standard Server Edition, 2008 Datacenter Server, 2008 Enterprise Server, 2008 Standard Server Edition

Problem Description

When OfficeScan (OSCE) client or Worry-free Business Security (WFBS) Security Agent is running, backing up using Symantec Backup Exec 12.5 has slowed down significantly.
During a backup process, the Symantec Backup Exec software generates huge file events. OSCE or WFBS Behavior Monitoring (AEGIS) processes these events when they occur. This causes the backup process to become slow.


To address this issue:
  1. Stop the Aegis TMBMSRV service.
    • Using the Services MMC (services.msc), stop the Trend Micro Unauthorized Change Prevention Service.
    • You can also run sc stop tmbmservice on a command prompt to stop the service.
  2. Open the Registry Editor.
    Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
  3. Look for the hive [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Aegis].
    For a 64-bit server OS: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\AEGIS\RmSysEventDebugFlags
  4. Locate the string "RmSysEventDebugFlags" and add a dword value 000f0001.
    "RmSysEventDebugFlags"=dword:000f0001 will remove the file hooking from AEGIS. This means that AEGIS service will no longer receive the any file events.
  5. Restart the machine.
Note: Add the .bkf extension in the exclusion list for real time scan.

Rate this Solution
Did this article help you?

Please provide your comments to help us improve this solution.

  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.

Connect with us on