<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1331325345;
mso-list-type:hybrid;
mso-list-template-ids:-1592986748 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:2094085099;
mso-list-type:hybrid;
mso-list-template-ids:1441585106 1193198088 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-start-at:5;
mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";}
@list l1:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=WordSection1>
<p class=MsoNormal>BigFix, an IBM Company has released Service Pack 1 for Core
Protection Module 1.6.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Customers who have Core Protection Module 1.0, 1.5 or 1.6
deployed should install this patch. The following content has been
modified to facilitate deployment of Service Pack 1 for Core Protection Module
1.6:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>ID Fixlet/Task<o:p></o:p></p>
<p class=MsoNormal>15 Core Protection
Module – Install Server Components<o:p></o:p></p>
<p class=MsoNormal>55 Core Protection
Module – Upgrade Server Components<o:p></o:p></p>
<p class=MsoNormal>18 Core Protection
Module – Endpoint Deploy <o:p></o:p></p>
<p class=MsoNormal>59 Core Protection
Module – Upgrade Endpoint<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>-----------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal>Service Pack 1 Enhancements:<o:p></o:p></p>
<p class=MsoNormal>-----------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>Introduces the option to scan mapped
drives. The default behavior is set to prevent scanning of mapped drives.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>Adds support of wildcards in the exclusions
list.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>Service Pack, Patch and Hotfix versions are
displayed on both the Console and Client dashboards.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>Reports identify OfficeScan clients correctly.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>New Reports: Real-time Email for Malware
Infections alerts, Outbreak alerts, Action Failure alerts.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>Migration to the Common AU 2.0 for compatibility
with other Trend products.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>The Trend Micro Case Diagnosis Tool (CDT) is now
deployed with the CPM server component. Running CDT will collect CPM
server component information as well as client information.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>The OfficeScan client is now detected as a
conflicting product.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span
style='font-family:Symbol'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]>The following products are detected as
conflicting products and removed during installation of CPM:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Authentium(TM) Command AntiVirus for Windows<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'>
Enterprise 4.9x<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> - Computer
Associates (CA) eTrust(TM) Antivirus 8.1.655<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
eScan(TM) for Windows 8.0.653.1<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
ESET(TM) NOD32(TM) Antivirus build 3.0.642<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
ESET NOD32 Antivirus 3.0.667.0<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
ESET NOD32 Antivirus 3.0.684.0<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
F-Secure(TM) Anti-Virus Client Security 6.03<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
F-Secure Client Security 7.0<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
F-Secure Client Security 7.10<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
F-Secure Client Security 8.00<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
F-Secure Client Security 8.01<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
F-Secure Client Security 8.01.133<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Kaspersky(TM) Anti-Virus 6.0.3.837<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
McAfee(TM) Total Protection<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
McAfee ePolicy Agent 3.6.0.574<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
McAfee VirusScan Enterprise 8.7.0.570<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Norman(TM) Security Suite 7<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Norman Virus Control 5.99.0600<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Panda(TM) Endpoint Agent 5.02.00.0004<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Symantec 11.0.780.1109 Endpoint Protection<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Symantec 11.0.2010.25 Endpoint Protection MR 2<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Symantec Endpoint Protection 10.1.8000.8<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Symantec Endpoint Protection 11.0.3001.2224<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Symantec Endpoint Protection 11.0.4000.2295<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Symantec Endpoint Protection 11.0.4202.75<o:p></o:p></p>
<p class=MsoNormal style='margin-left:.5in'> -
Symantec 11.0.4000.2295 Endpoint Protection 64-bit Edition<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>-----------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal>Service Pack 1 – Summary of Resolved Issues<o:p></o:p></p>
<p class=MsoNormal>-----------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>The CPM client stops running and requires deployment of
the Improper Services Fixlet to restart the client. Previously fixed in
Hotfix 0003.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>2. The CPM client cannot be recognized by the Windows
Security Center. Previously fixed in Hotfix 0004. <o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>64-bit CPM clients are unable to write to Windows NT
event logs.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='mso-list:Ignore'>4.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>Spyware pattern file versions displayed incorrectly.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='mso-list:Ignore'>5.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>Potential BSoD errors when scanning large files while
ntrtscan.exe is unloading the scan engine drivers. <o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='mso-list:Ignore'>6.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>Scanning a large number of files could occupy large
amounts of memory in PccNT.exe.<o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='mso-list:Ignore'>7.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>CPM clients do not use the currently logged on user
account when performing manual scans on network drives.<o:p></o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal>Note that when you deploy CPM to endpoints, all language
packages will be downloaded to the server cache and local relay caches.
Hotfix 007 resolves this issue but is not included in this service pack.
If you are concerned about this issue, please contact support to obtain the
hotfix.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>--<o:p></o:p></p>
<p class=MsoNormal>BigFix, an IBM Company Application Engineering Team<o:p></o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p>
</div>
</body>
</html>