Creating Mutual Exclusion Handling on Malware Processes/Files

You can configure Outbreak Prevention to protect against security threats that utilize mutex processes by overriding the resources that the threat requires to infect and spread throughout the system. Outbreak Prevention creates mutual exclusions on files and processes related to known malware, preventing the malware from accessing these resources.

Tip

Trend Micro recommends maintaining these exclusions until a solution to the malware threat can be implemented. Contact Support to obtain the correct mutex names to protect against during an outbreak.

Note

Mutual exclusion handling requires the Unauthorized Change Prevention Service and only supports 32-bit platforms.

Procedure

Go to Agents → Outbreak Prevention.
In the agent tree, click the root domain icon () to include all agents or select specific domains or agents.
Click Start Outbreak Prevention.
Click Create mutual exclusion (mutex) handling on malware processes/files.
Type the mutex name to protect against in the text field provided.

Add or remove mutex names from the list using the + and - buttons.

Note

Outbreak Prevention supports mutual exclusion handling on a maximum of six mutex threats.
Click Save.

The Outbreak Prevention Settings screen displays again.
Click Start Outbreak Prevention.

The outbreak prevention measures you selected display in a new window.