<> Trend Micro Incorporated December 15, 2017 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Worry-Free(TM) Business Security 9.5 Patch 1 - Build 1445 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTICE: This Readme file was current as of the date above. However, all customers are advised to check Trend Micro's website for documentation updates. http://www.trendmicro.com/download TIP: Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: https://clp.trendmicro.com/FullRegistration?T=TM Contents ========================================================== 1. About Worry-Free Business Security 1.1 Overview of This Release 1.2 Who Should Install This Release 2. What's New 2.1 Enhancements 2.2 Resolved Known Issues 3. Documentation Set 4. System Requirements 5. Installation 5.1 Installing 5.2 Uninstalling 6. Post-Installation Configuration 7. Known Issues 8. Release History 9. Files Included in This Release 10. Contact Information 11. About Trend Micro 12. License Agreement ========================================================== 1. About Worry-Free Business Security ====================================================================== Trend Micro Worry-Free Business Security protects small business users and assets from data theft, identity theft, risky websites, and spam (Advanced Only). 1.1 Overview of This Release =================================================================== This release contains solutions to known issues discovered after the release of Worry-Free Business Security 9.5, improves its ability to detect ransomware, and enables it to support Microsoft(TM) Windows(TM) Fall Creators Update. 1.2 Who Should Install This Release =================================================================== You should install this patch if you are running any build of Worry-Free Business Security 9.5 released before this patch. 2. What's New ====================================================================== This patch resolves several issues in Worry-Free Business Security 9.5. Refer to "Enhancements" and "Resolved Known Issues" for more information. NOTE: Please install this patch before completing any procedure in this section (see "Installation"). 2.1 Enhancements =================================================================== The following enhancements are included in this release: Enhancement 1: Platform Support - This patch enables Worry-Free Business Security 9.5 to support Windows Fall Creators Update. Enhancement 2: Ransomware Detection - This patch improves the ability of Worry-Free Business Security 9.5 to detect ransomware. 2.2 Resolved Known Issues =================================================================== This patch resolves the following: Issue 1: In the "Hotfix History" page, the agent component version always appears as "None". ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This patch ensures that Worry-Free Business Security 9.5 to retrieves the hotfix history information from the correct registry so that the correct component version information appears on the "Hotfix History" page. Issue 2: An issue prevents Worry-Free Business Security 9.5 from completing scheduled database backup tasks on the Security Server. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This patch updates the table list of the database backup task to help ensure that it can back up the Security Server normally. Issue 3: The Trend Micro Unauthorized Change Prevention Service uses up a large amount of CPU resources. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 3: This patch updates the Behavior Monitoring module to resolve the issue. Issue 4: USB 3.0 devices are disconnected unexpectedly after the scheduled restart following Security Agent installation. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 4: This patch updates the Worry-Free Business Security Agent program to ensure that the USB 3.0 devices are not disconnected unexpectedly after the scheduled restart. Issue 5: Microsoft(TM) Outlook 2010 cannot load the Trend Micro Antispam (TMAS) Toolbar add-on. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 5: This patch merges the code from TMAS 8.0 to ensure that the TMAS add-on works normally in Outlook 2010. Issue 6: An issue related to the "CmdHPmc.dll" library triggers the Security Server master service to stop unexpectedly. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 6: This patch resolves the issue. Issue 7: The "x64" folder contains the x32 version of the TMPerfTool tool file. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 7: This patch replaces the TMPerfTool x32 tool file in the "x64" folder with the x64 version. Issue 8: When the Web Reputation Service (WRS) of the security agent program blocks access to a certain webpage, it displays the "Website blocked by Trend Micro" alert page. This alert page may be affected by Cross-Site Scripting (XSS) vulnerabilities. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 8: This patch updates the agent program to resolve the XSS vulnerabilities. Issue 9: Blue Screen of Death (BSOD) may occur after applying Microsoft KB4043961 on computers running on Windows 10 Fall Creators Update and protected by Worry-Free Business Security 9.5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 9: This patch prevents the BSOD issue on affected computers. Issue 10: The server name field in the "Component Versions" page does not display any information. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 10: This patch ensures that the field displays the correct information. Issue 11: The uninstall password no longer works after an upgrade. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 11: This patch resolves the issue and requires the following procedure. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Procedure 11: To resolve the issue: a. Install this patch (see "Installation"). b. Open the "ofcscan.ini" file on the Security Server. c. Add the following key under the "Global Setting" section and set it to "0". [Global Setting] UseMsiFunctionInstUninst=0 d. Save the changes and close the file. e. Logon Security Server web console and then click the "Save" button under the Global Setting to deploy the setting to the Security Agent. f. Reload Security Agent. Issue 12: Some information on the "About" page of the Worry-Free Business Security console is incorrectly translated. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 12: This patch ensures that the information on the page are translated correctly. Issue 13: The UMH module is affected by a vulnerability. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 13: This patch resolves the vulnerability. Issue 14: A Javascript issue prevents users from adding a report template in Worry-Free Business Security 9.5. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 14: This hotfix updates the related Javascript to help ensure that users can add report templates normally. Issue 15: The query scope information disappears after users launch a log query. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 15: This hotfix updates the Javascript to ensure that the query scope information appears in log query results. Issue 16: Some approved websites are blocked because of web ads in Firefox. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 16: This hotfix updates the Osprey module for Firefox to help ensure that users can access approved websites in Firefox. 3. Documentation Set ====================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com 4. System Requirements ====================================================================== You must install Worry-Free Business Security 9.5 before installing this patch. 5. Installation ====================================================================== This section explains key steps for installing the patch. 5.1 Installing =================================================================== To install: 1. Copy the patch executable file to a temporary folder, for example, "C:\temp". 2. Double-click the file. The modules are automatically copied to the correct destination. This patch installation package automatically rolls back the Security Server to its previous configuration if there are problems during installation. If you encounter problems after installation, manually roll back the Security Server to the original configuration. 4.2 Uninstalling =================================================================== To manually roll back to the previous build: 1. Locate the backup folder that the patch package created in the "\PCCSRV\Backup\Patch_1_B1445" directory. 2. Copy the backup modules to the original folders. 3. Run the "TmTouch.exe" tool to trigger the hotfix mechanism. To run "TmTouch.exe": a. Open a command prompt on the server. b. At the command prompt, browse to "PCCSRV\admin\utility\touch". c. Use the following syntax to run the touch tool: TmTouch.exe {filename} Note: {filename} is the file that you want to roll back. "TmTouch.exe" changes the file creation date to the current system time. 6. Post-installation Configuration ====================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 7. Known Issues ====================================================================== There are no known issues for this patch release. 8. Release History ====================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 9. Files Included in this Release ====================================================================== A. Files for Current Issue ------------------------------------------------------------------- Filename Build No. ---------------------------------------------------------------- NTRtScan.exe 19.50.0.1125 TmListen.exe 19.50.0.1130 TMAS_ENG_WIN32.zip 2017/12/27 fcWofieUI.dll 19.50.0.1125 PccNT.exe 19.50.0.1125 NTRmv.exe 19.50.0.1130 ICRCHdler.dll 2.82.0.1047 TmPfw.exe 5.83.0.1039 CCSF_WIN32.zip 2017/12/27 tmufeng.dll 3.9.0.1012 ssleay32.dll 1.0.2.10 libcurl.dll 7.49.1.0 libeay32.dll 1.0.2.10 tmCfwApi.dll 5.83.0.1039 TmFpHcEx.exe 5.83.0.1039 tmHash.dll 5.83.0.1039 TmPfw.exe.manifest 2017/12/27 TmPfwApi.dll 5.83.0.1039 TmPfwCtl.dll 5.83.0.1039 TmPfwCtl_xp.dll 5.83.0.1039 TmPfwRul.dll 5.83.0.1039 tmwfpapi.dll 5.83.0.1039 CCSF_PTN.zip 2017/12/27 TMAS_ENG_X64.zip 2017/12/27 Ntrtscan.exe 19.50.0.1125 CCSF_X64.zip 2017/12/27 tmcomm.cat 2017/12/27 Tmcomm.inf 2017/12/27 Tmcomm.sys 7.0.0.1155 TmAegisSysEvt.dll 2.976.0.2085 TMBMCLI.dll 2.976.0.2085 TMBMSRV.exe 2.976.0.2085 tmcomeng.dll 2.976.0.2085 DIFxAPI.dll 2.1.0.0 ncfg.exe 5.82.0.1095 tdiins.exe 5.83.0.1019 tmactmon.cat 2017/12/27 tmactmon.inf 2017/12/27 tmactmon.sys 2.976.0.2085 tmevtmgr.cat 2017/12/27 tmevtmgr.inf 2017/12/27 tmevtmgr.sys 2.976.0.2085 tm_cfw.cat 2017/12/27 TM_CFW.inf 2017/12/27 TM_CFW.sys 5.82.0.1050 TM_CFWMP.inf 2017/12/27 tmebc.cat 2017/12/27 TMEBC.inf 2017/12/27 TMEBC32.sys 1.5.0.1023 tmeevw.cat 2017/12/27 tmeevw.inf 2017/12/27 tmfilter.cat 2017/12/27 TmFilter.sys 10.0.0.1043 tmeevw.sys 2.0.0.1017 tmlwf.cat 2017/12/27 TMLWF.sys 5.83.0.1038 tmlwf.inf 2017/12/27 tmpreflt.inf 2017/12/27 tmpreflt.sys 10.0.0.1043 tmlwfins.exe 5.83.0.1038 tmtdi.cat 2017/12/27 tmtdi.dll 5.83.0.1019 TmTdi.inf 2017/12/27 tmtdi.sys 5.82.0.1062 tmusa.cat 2017/12/27 tmusa.inf 2017/12/27 tmusa.sys 2.0.0.1082 tmwfp.cat 2017/12/27 TMWFP.sys 5.83.0.1038 tmwfpins.exe 5.83.0.1038 tmxpflt.inf 2017/12/27 TmXPFlt.sys 10.0.0.1043 tmwfp.inf 2017/12/27 vsapiNT.sys 10.0.0.1043 VsapiNT.inf 2017/12/27 tmwlutil.dll 2.976.0.2085 TmEngDrv.dll 2.976.0.2085 TMPEM.dll 2.976.0.2085 TMEBC64.sys 1.5.0.1023 tmxpflt.sys 10.0.0.1043 VsapiNT.sys 10.0.0.1043 TMPerfTool.exe 2.976.0.1199 TMPerfTool.log 2017/12/27 TMPerfTool.cfg 2017/12/27 OfcService.exe 19.5.0.1443 DbServer.exe 19.5.0.1443 UI.zip 2017/12/27 CmdHPmc.dll 19.5.0.1438 trend-common.js 2017/12/27 About.js 2017/12/27 DashboardOSCERansom.htm 2017/12/27 Log_query.htm 2017/12/27 VSAPI32.DLL 10.0.0.1040 BPMNT.DLL 8.0.0.1001 ieplug.dll 2.97.0.1040 ssapi32.dll 6.2.0.3034 TmSysEvt.dll 7.0.0.1147 tmtap.dll 6.0.0.1074 vsapi64.dll 10.0.0.1040 BPMNT.dll 8.100.0.1002 ieplug64.dll 2.97.0.1040 ssapi64.dll 6.2.0.3034 TSC64.exe 7.5.0.1035 OspreyWebExt32.7z 2017/12/27 OspreyWebExt64.7z 2017/12/27 BMdriver_x32_2-976-2085.zip 2017/12/27 BMdriver_x64_2-976-2085.zip 2017/12/27 bmservice_x32_2-976-2085.zip 2017/12/27 bmservice_x64_2-976-2085.zip 2017/12/27 B. Files for Previous Issues ------------------------------------------------------------------- Not applicable. C. Network Traffic Required in Deployment ------------------------------------------------------------------- Estimated size (in terms of bandwidth) of deployed client files in this critical patch. - 32-bit client total = 85.00 MB - 64-bit client total = 94.00 MB 10. Contact Information ====================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 11. About Trend Micro ====================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2017, Trend Micro Incorporated. All rights reserved. Trend Micro, Worry-Free, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 12. License Agreement ====================================================================== View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide