Performing a manual update or rollback of the OfficeScan scan engine
 

Solution ID:

EN-122633

Product:

OfficeScan - 10.0, 7.0, 7.3, 8.0; OfficeScan Corporate Edition - 6.5
Operating System:
SP 6a; Windows 2000 Professional; Windows 2000 Server; Windows NT 4.0; Windows Server 2003 Enterprise Edition; Windows Server 2003 Standard Edition; Windows Vista; Windows 2000 Advanced Server

Published:

11/5/2009 4:45 PM 
 

Problem:

If you are having problems with the current OfficeScan scan engine, you can perform a manual update or rollback for both the OfficeScan server and client.

 

Solution:

Public

 
Choose one of the following:

OfficeScan server (Windows 2000/XP/2003/Vista)

OfficeScan server (Windows 95/98/ME) - for OfficeScan 7.x only

OfficeScan server (64-Bit AMD)

OfficeScan client (Windows 2000/XP/2003/Vista)

OfficeScan client (Windows 95/98/ME)


OfficeScan server (Windows 2000/XP/2003/Vista)

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Win NT/2000/XP (vsapi-KD-x.xxx-yyyy.zip).

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

2.

Check if the zip file contains another zipped file or the four (4) engine files. If it contains the 4 engine files, then proceed to step 3.
Otherwise, extract the file and then make sure that extracted zip file has the 4 engine files inside.
Note: There had been instances in the past wherein the engine zip files uploaded on the Update Center contained another zip file where the engine files were stored.

3.

Rename the extracted ZIP file (VSAPI-KD-8.913-1006.ZIP) to "tmengNT.zip".

4.

Extract the contents of the tmengNT.zip file to the ..\PCCSRV\pccnt\drv folder.

5.

Copy the tmengNT.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.

6.

Rename the tmengNT.zip file in the ..\PCCSRV\Download\engine folder to "eng_ntkd.zip".

7.

Check the properties of the eng_ntkd.zip file then note its file size in bytes.

8.

Open the ..\PCCSRV\Download\server.ini file in a text editor.

9.

Under the "[ENGINE]" section, change the values of the following parameters:

[ENGINE]
Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz
E.10=VSAPI32_NT_KD,engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz

where x.xxx is the scan engine version, yyyy is the build number, and zzzzz is the file size in bytes.

For example: Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, 8.550, 805426

E.10=VSAPI32_NT_KD, engine/eng_ntkd.zip, 8.550, 805426

10.

Save and close the file.

11.

Open the ..\PCCSRV\ofcscan.ini file in a text editor.

12.

Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineNT_Version" parameter to x.xxx.yyyy (the version and build number of the scan engine).

13.

Save and close the file.


Back to options



OfficeScan server (Windows 95/98/ME) - for OfficeScan 7.x only

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Windows 95/98/ME (vsapi-VXD-x.xxx-yyyy.zip).

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

2.

Rename the ZIP file to "tmeng95.zip".

3.

Extract the contents of the tmeng95.zip file to the ..\ PCCSRV\Pcc95\Common folder.

4.

Copy the tmeng95.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.

5.

Rename the tmeng95.zip file in the ..\PCCSRV\Download\engine folder to " engv_vxd.zip".

6.

Check the properties of the engv_vxd.zip file then note its file size in bytes.

7.

Open the ..\PCCSRV\Download\server.ini file in a text editor.

8.

Under the "[ENGINE]" section, change the values of the following parameters:

[ENGINE]
Path_VSAPI32_VXD=engine/engv_vxd.zip, x.xxx.yyyy, zzzzz
E.2=VSAPI32_VXD, engine/engv_vxd.zip, x.xxx.yyyy, zzzzz

where x.xxx is the scan engine version, yyyy is the build number, and zzzzz is the file size in bytes.

For example: Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, 8.550, 805426

E.10=VSAPI32_NT_KD, engine/eng_ntkd.zip, 8.550, 805426

9.

Save and close the file.

10.

Open the ..\PCCSRV\ofcscan.ini file in a text editor.

11.

Under "INI_PROGRAM_VERSION_SECTION", change the value of the "Engine95_Version" parameter to x.xxx.yyyy (the version and build number of the scan engine).

12.

Save and close the file.


Back to options



OfficeScan Server (64-Bit AMD)

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Win NT/2000/XP for 64 Bit (VSAPI-KD-AMD64-x.xxx-yyyy.ZIP).

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

2.

Rename the ZIP file to "tmengx64.zip".

3.

Extract the contents of the tmengx64.zip file to the ..\PCCSRV\pccnt\drv\X64 folder.

4.

Copy the tmengX64.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.

5.

Rename the tmengX64.zip file in the ..\PCCSRV\Download\engine folder to "engv85_amd64_ntkd.zip".

6.

Check the properties of the engv85_amd64_ntkd.zip file then note its file size in bytes.

7.

Open the ..\PCCSRV\Download\server.ini file in a text editor.

8.

Under the "[ENGINE]" section, change the values of the following parameters:

[ENGINE]

Path_VSAPI_AMD64_NTKD=engine/engv85_amd64_ntkd.zip, x.xxx

E.1000=VSAPI_AMD64_NTKD, engine/engv85_amd64_ntkd.zip, x.xxx.yyyy, zzzzz

where x.xxx is the scan engine version, yyyy is the build number, and zzzzz is the file size in bytes.

For example: Path_VSAPI_AMD64_NTKD =engine/eng_ntkd.zip, 8.550, 805426

E.1000=VSAPI_AMD64_NTKD , engine/eng_ntkd.zip, 8.550, 805426

9.

Save and close the file.

10.

Open the ..\PCCSRV\ofcscan.ini file in a text editor.

11.

Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineX64_Version" parameter to x.xxx.yyyy (the version and build number of the scan engine).

12.

Save and close the file.


Back to options


OfficeScan client (Windows 2000/XP/2003/Vista)

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Win NT/2000/XP (vsapi-KD-x.xxx-yyyy.zip).

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

2.

Stop the following services:

OfficeScan NT Listener
OfficeScanNT Real-time Scan

3.

Make a backup of the following files in the \ProgramFiles\Trend Micro\OfficeScan Client folder:

tmfilter.sys
vsapint.sys
tmpreflt.sys
tmxpflt.sys

4.

Extract the contents of the downloaded ZIP file to the \Program Files\Trend Micro\OfficeScan Client folder.

5.

Start the services you stopped in step 2.


Back to options



OfficeScan client (Windows 95/98/ME)

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Windows 95/98/ME (vsapi-VXD-8.320-1003.zip).

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

2.

Right-click on the OfficeScan icon on the system tray then select Unload OfficeScan.

3.

Make a backup of the following files in the \ProgramFiles\Trend Micro\OfficeScan Client folder:

filter32.vxd
vsapi32.vxd

4.

Extract the contents of the downloaded ZIP file to the \Program Files\Trend Micro\OfficeScan Client folder.

5.

Click Start > Programs > Trend OfficeScan Win95 > OfficeScan95 to reload OfficeScan.


Back to options




Related solutions:

Manually updating the pattern file for the OfficeScan server and client

OfficeScan 7.x clients do not automatically update to the latest virus pattern file

Rolling back the OfficeScan 7.0 scan engine when the old engine does not exist on the OfficeScan server


  
Rate this Solution
Did this article help you?
   Yes       No
Comments:
This form uses an automated system and does not provide feedback.