Event ID - 7019

Event ID7019
SourceServerProtect
DescriptionCircular dependency: The Trend ServerProtect Filter service depends on a service in a group which starts later.
Event InformationAccording To Trendmicro:
This error is caused by the changes made to the file system hooking module for Windows Server 2003. Originally, the tmfilter.sys file was the hooking module for Windows NT 2000. But in Windows Server 2003, the new tmXPflt.sys and tmpreflt.sys file system hooking modules are being used to be compatible with this OS.

Because the server was originally Windows 2000 or NT, the devices installed for ServerProtect is still tmfilter.sys.
When, the server was upgraded to Windows 2003, this device remained with the devices and registry, thus, causing the incompatibility when Windows Server 2003 starts.

Solution:
To resolve the issue:

1. Open a command prompt and go to the \Sprotect folder of the Windows Server 2003.
2. Run the command:
spntsvc /u
The spntsvc /u command removes all services and devices of ServerProtect on the system.
3. Run Regedit and delete the following keys:
Important: Before editing the registry, make sure you understand how to restore it if a problem occurs. For more information, view the Restoring the Registry Help topic in Regedit.exe or Restoring a Registry Key Help topic in Regedt32.exe. Making incorrect changes to your registry can cause serious system problems. Always make a back up copy before making any registry changes.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SpntSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TMFilter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VsapiNT
4. Reboot the server.
5. Open a command prompt and go to the \Sprotect folder of the Windows Server 2003.
6. Run the command:
spntsvc /i
The spntsvc /i command recreates the services and devices which is compatible with the current OS.
7. Verify if the following entries are in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SpntSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TMFilter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmpreflt
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VsapiNT
8. Do a final reboot of the Windows Server 2003 to make sure the Trend ServerProtect service will now start automatically without errors.
Reference LinksThe ServerProtect for NT (SPNT) 5.56 service does not start properly after upgrading to Windows Server 2003

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.