Knowledge Base

Support

Performing a manual update or rollback of the OfficeScan scan engine

Solution IDLast Updated
0122633Date : 2011/06/6 Time: 7:31 PM (PST)


Product/VersionPlatform
OfficeScan - 10.0, 10.5, 8.0
Windows - 2000 Advanced Server, 2000 Professional, 2000 Server, 2003 Enterprise Server, 2003 Standard Server Edition, Vista 32-bit, XP Professional

Problem Description

If you are having problems with the current OfficeScan scan engine(such as the Trend Micro VSAPI NT service failed to start), you can perform a manual update or rollback for both the OfficeScan server and client.

This solution is also applicable to OfficeScan environments which has outdated Scan Engine and having difficulty in updating them via the OSCE management console.

Solution

Choose one of the following:

 
  •  

OfficeScan server (Windows 2000/XP/2003/Vista)
  •  

OfficeScan server (64-Bit AMD)
  •  

OfficeScan client (Windows 2000/XP/2003/Vista)

 

 

OfficeScan server (Windows 2000/XP/2003/Vista)

 

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Win NT/2000/XP (vsapi-KD-x.xxx-yyyy.zip).

 

 

 

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

 

 

2.

Rename the ZIP file to "tmengNT.zip".

 

 

3.

Extract the contents of the tmengNT.zip file to the ..\PCCSRV\pccnt\drv folder.

 

 

4.

Copy the tmengNT.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.

 

 

5.

Rename the tmengNT.zip file in the ..\PCCSRV\Download\engine folder to "eng_ntkd.zip".

 

 

6.

Check the properties of the eng_ntkd.zip file then note its file size in bytes.

 

 

7.

Open the ..\PCCSRV\Download\server.ini file in a text editor.

 

 

8.

Under the "[ENGINE]" section, change the values of the following parameters:

 

 

 

 

[ENGINE]
Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz
E.10=VSAPI32_NT_KD,engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz

 

 

 

where x.xxx is the scan engine version, yyyy is the build number, and zzzzz is the file size in bytes.

 

For example: Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, 8.550, 805426

                      E.10=VSAPI32_NT_KD, engine/eng_ntkd.zip, 8.550, 805426

 

 

9.

If you are updating Officescan 10, the zipfile names will be different and will not be eng_ntkd.zip.

 

 

 

Take note of the lines and rename them accordingly.

 

For example: If you see Path_VSAPI32_NT_KD=engine/eng901ntkd.zip then rename it to Path_VSAPI32_NT_KD=engine/eng_ntkd.zip.

 

 

10.

Save and close the file.

 

 

11.

Open the ..\PCCSRV\ofcscan.ini file in a text editor.

 

 

12.

Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineNT_Version" parameter to x.xxx.yyyy (the version and build number of the scan engine).

 

 

13.

Save and close the file.




OfficeScan Server (64-Bit AMD)

 

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Win NT/2000/XP for 64 Bit (VSAPI-KD-AMD64-x.xxx-yyyy.ZIP).

 

 

 

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

 

 

2.

Rename the ZIP file to "tmengx64.zip".

 

 

3.

Extract the contents of the tmengx64.zip file to the ..\PCCSRV\pccnt\drv\X64 folder.

 

 

4.

Copy the tmengX64.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.

 

 

5.

Rename the tmengX64.zip file in the ..\PCCSRV\Download\engine folder to "engv85_amd64_ntkd.zip".

 

 

6.

Check the properties of the engv85_amd64_ntkd.zip file then note its file size in bytes.

 

 

7.

Open the ..\PCCSRV\Download\server.ini file in a text editor.

 

 

8.

Under the "[ENGINE]" section, change the values of the following parameters:

 

 

 

 

[ENGINE]

Path_VSAPI_AMD64_NTKD=engine/engv85_amd64_ntkd.zip, x.xxx

E.1000=VSAPI_AMD64_NTKD, engine/engv85_amd64_ntkd.zip, x.xxx.yyyy, zzzzz

 

 

 

where x.xxx is the scan engine version, yyyy is the build number, and zzzzz is the file size in bytes.

 

For example: Path_VSAPI_AMD64_NTKD =engine/eng_ntkd.zip, 8.550, 805426

                      E.1000=VSAPI_AMD64_NTKD , engine/eng_ntkd.zip, 8.550, 805426

 

 

9.

If you are updating Officescan 10, the zipfile names will be different and will not be eng_ntkd.zip.

 

 

 

Take note of the lines and rename them accordingly.

 

 

 

For example: If you see Path_VSAPI32_NT_KD=engine/eng901ntkd.zip then rename it to Path_VSAPI32_NT_KD=engine/eng_ntkd.zip.

 

 

10.

Save and close the file.

 

 

11.

Open the ..\PCCSRV\ofcscan.ini file in a text editor.

 

 

12.

Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineX64_Version" parameter to x.xxx.yyyy (the version and build number of the scan engine).

 

 

13.

Save and close the file.

 

 

 

OfficeScan client (Windows 2000/XP/2003/Vista)\

 

1.

Go to the Trend Micro Scan Engine Updates page and download the latest scan engine for Win NT/2000/XP (vsapi-KD-x.xxx-yyyy.zip).

 

 

 

If you want to perform a manual rollback, download a previous version of the scan engine or use an existing backup.

 

 

2.

Stop the following services:

 

 

 

 

OfficeScan NT Listener
OfficeScanNT Real-time Scan

 

 

 

To do this:

 

 

 

a.

Click Start > Run > type in "services.msc".

 

 

 

 

b.

Scroll down and click to select the OfficeScan NT Listener Service.

 

 

 

 

c.

Right-click on the OfficeScan NT Listener Service and then click Stop.

 

 

 

 

d.

Repeat steps b and c, but this time for the OfficeScan Real-time Scan Service.

 

 

3.

Make a backup of the following files in the \ProgramFiles\Trend Micro\OfficeScan Client folder:

 

 

 

 

tmfilter.sys
vsapint.sys
tmpreflt.sys
tmxpflt.sys

 

 

4.

Extract the contents of the downloaded ZIP file to the \Program Files\Trend Micro\OfficeScan Client folder.

 

 

5.

Start the services you stopped in step 2.




Related solutions:

Manually updating the pattern file for the OfficeScan server and client

OfficeScan 7.x clients do not automatically update to the latest virus pattern file

Rolling back the OfficeScan 7.0 scan engine when the old engine does not exist on the OfficeScan server

 


Rate this Solution
Did this article help you?  
 
 Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on