Performing a manual update or rollback of the OfficeScan Scan Engine

Support
Solution ID Last Updated
0122633 Date : 2014/04/11 Time:3:57 AM , (PST)


Product/Version Platform
OfficeScan - 10.0, 10.5, 10.6, 11.0;
Windows - 2000 Advanced Server, 2000 Professional, 2000 Server, 2003 Enterprise Server, 2003 Standard Server Edition, Vista 32-bit, XP Professional, 2012 Standard, 2012 Standard R2

Problem Description

If you are having problems with the current OfficeScan Scan Engine (such as the Trend Micro VSAPI NT service failed to start), you can perform a manual update or rollback for both the OfficeScan server and client.
This solution is also applicable to OfficeScan environments which has outdated Scan Engine and having difficulty in updating them via the OSCE management console.

Solution

[ Expand All ]

 

OfficeScan server (Windows 2003/2008(R2)/2012(R2))

  1. Go to the Trend Micro Scan Engine Updates pageand download the latest Scan Engine for Windows Kernel 32-bit (vsapi-KD-x.xxx-yyyy.zip).
    If you want to perform a manual rollback, download a previous version of the Scan Engine or use an existing backup.
  2. Rename the ZIP file to "tmengNT.zip".
  3. Extract the contents of the tmengNT.zip file to the ..\PCCSRV\pccnt\drv folder.
  4. Copy the tmengNT.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.
  5. Rename the tmengNT.zip file in the ..\PCCSRV\Download\engine folder to "eng_ntkd.zip".
  6. Check the properties of the eng_ntkd.zip file then note its file size in bytes.
  7. Open the ..\PCCSRV\Download\server.ini file in a text editor.
  8. Under the "[ENGINE]" section, change the values of the following parameters:
    [ENGINE]
    Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz
    E.10=VSAPI32_NT_KD,engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz
    where x.xxx is the Scan Engine version, yyyy is the build number, and zzzzz is the file size in bytes.
    For example: Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, 8.550, 805426
    E.10=VSAPI32_NT_KD, engine/eng_ntkd.zip, 8.550, 805426
  9. If you are updating Officescan 10, the zip file names will be different and will not be eng_ntkd.zip.
    Take note of the lines and rename them accordingly.
    For example: If you see Path_VSAPI32_NT_KD=engine/eng901ntkd.zip, rename it to Path_VSAPI32_NT_KD=engine/eng_ntkd.zip.
  10. Save and close the file.
To update the version in the Summary page, do this:
  1. Open the ..\PCCSRV\ofcscan.ini file in a text editor.
  2. Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineNT_Version" parameter to x.xxx.yyyy (the version and build number of the Scan Engine).
  3. Save and close the file.
To update the version in the Updates > Summary page, do this:
  1. Open the ..\PCCSRV\Private\component.ini file in a text editor.
  2. Under "[6104]" section, change the "Version" value:
    Note: The current value is the decimal equivalent of the Scan Engine version.
    For Example:
    Scan Engine: 8.550.1001
    Hex = 85500
    Dec = 546048
    The next value in "Version", after the decimal value, will follow the yyyy or the build number of the Scan Engine. The next value (0) will stay as is.
    [6104]
    ...
    ComponentName=Virus Scan Engine (32-bit)
    Version=546048 1001 0
  3. Save and close the file.

 

OfficeScan server (64-Bit AMD)

  1. Go to the Trend Micro Scan Engine Updates page and download the latest Scan Engine for Windows Kernel 64-bit (VSAPI-KD-AMD64-x.xxx-yyyy.ZIP). If you want to perform a manual rollback, download a previous version of the Scan Engine or use an existing backup.
  2. Rename the ZIP file to "tmengx64.zip".
  3. Extract the contents of the tmengx64.zip file to the ..\PCCSRV\pccnt\drv\X64 folder.
  4. Copy the tmengX64.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.
  5. Rename the tmengX64.zip file in the ..\PCCSRV\Download\engine folder to "engv85_amd64_ntkd.zip".
  6. Check the properties of the engv85_amd64_ntkd.zip file then note its file size in bytes.
  7. Open the ..\PCCSRV\Download\server.ini file in a text editor.
  8. Under the "[ENGINE]" section, change the values of the following parameters:
    [ENGINE]
    Path_VSAPI_AMD64_NTKD=engine/engv85_amd64_ntkd.zip, x.xxx
    E.1000=VSAPI_AMD64_NTKD, engine/engv85_amd64_ntkd.zip, x.xxx.yyyy, zzzzz
    where x.xxx is the Scan Engine version, yyyy is the build number, and zzzzz is the file size in bytes.
    For example:
    Path_VSAPI_AMD64_NTKD =engine/eng_ntkd.zip, 8.550, 805426
    E.1000=VSAPI_AMD64_NTKD , engine/eng_ntkd.zip, 8.550, 805426
  9. If you are updating Officescan 10, the zip file names will be different and will not be eng_ntkd.zip.
    Take note of the lines and rename them accordingly.
    For example: If you see Path_VSAPI32_NT_KD=engine/eng901ntkd.zip then rename it to Path_VSAPI32_NT_KD=engine/eng_ntkd.zip.
  10. Save and close the file.
To update the version in the Summary page, do this:
  1. Open the ..\PCCSRV\ofcscan.ini file in a text editor.
  2. Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineX64_Version" parameter to x.xxx.yyyy (the version and build number of the Scan Engine).
  3. Save and close the file.
To update the version in the Updates > Summary page, do this:
  1. Open the ..\PCCSRV\Private\component.ini file in a text editor.
  2. Under "[6035]" section, change the "Version" value:
    Note: The current value is the decimal equivalent of the Scan Engine version.
    For Example:
    Scan Engine: 8.550.1001
    Hex = 85500
    Dec = 546048
    The next value in "Version", after the decimal value, will follow the yyyy or the build number of the Scan Engine. The next value (0) will stay as is.
    [6035]
    ...
    ComponentName=Virus Scan Engine (32-bit)
    Version=546048 1001 0
  3. Save and close the file.

 

OfficeScan client (Windows 2000/XP/2003/Vista)

  1. Go to the Trend Micro Scan Engine Updates page and then download the latest Scan Engine for Windows NT/2000/XP (vsapi-KD-x.xxx-yyyy.zip).
  2. Stop the following services:
    • OfficeScan NT Listener
    • OfficeScanNT Real-time Scan 
    To do this:
    1. Click Start > Run > type in "services.msc". The service window will open.
    2. Scroll down and select the OfficeScan NT Listener Service.
    3. Right-click on the OfficeScan NT Listener Service and then click Stop.
    4. Repeat steps 2 and 3, but this time for the OfficeScan Real-time Scan Service.
  3. Create a back up of the following files in the C:\Program Files\trendmicro\OfficeScan Client folder.
    • tmfilter.sys
    • vsapint.sys
    • tmpreflt.sys
    • tmxpflt.sys
  4. Extract the contents of the downloaded zip file to the :\Program Files\trendmicro\OfficeScan Client folder.
  5. Start the following services:
    • OfficeScan NT Listener
    • OfficeScanNT Real-time Scan


Rate this Solution
Did this article help you?

Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on