The web console provides a way to rollback one version, given that the server has an older version.

1. Log on to the Apex One web console.
2. Go to Updates > Rollback.

   

   ^{Click the image to enlarge.}

3. Perform one of the following:
   • For OfficeScan 10.x: Roll back the component to the previous version on both the OfficeScan server and clients, click Roll Back Server and Client Versions.
   • Roll back the component to the previous version on both the OfficeScan server and agents, click Roll Back Server and Agent Versions.
   • Synchronize the component version of the OfficeScan clients/agents with that of the server, click Synchronize with Server.
4. On the client tree, select the domains or clients whose components you want to roll back. To select all clients/agents, select the OfficeScan server root icon.
5. Click Rollback. The server will send a notification to the selected clients/agents.
6. Click Back to return to the Rollback screen.

This way of rollback is recommended in emergency situations where the agent machine is having functionality issues such as crashes or System Hang after an agent pattern update.

To do a manual rollback:

1. On the OfficeScan client, right-click the OfficeScan icon in the Windows taskbar, then select Unload Security Agent.
2. Enter the unload password.
3. Find the latest pattern file in the OfficeScan home directory:
   lpt$vpn.xxx
   where: xxx is the pattern file number

   By default, the directory is C:\Program Files (X86)\Trend Micro\Security Agent.

4. Delete the latest pattern file.
5. Load the security agent.