Recent investigations have confirmed a deadlock can occur within Endpoint Security for Windows if installed alongside ZDK Encryption software. This symptom can only occur after enabling the following Exploit Prevention rules, which are disabled by default:

T1561 - MBR WRITE attempt through LBA matching criteria
T1561 - MBR WRITE attempt through DISK_REGION matching criteria

If you are using ZDK encryption software in your environment or for more information about this issue, refer to Knowledge Base article KB95315.