• Ofcmas.log inside the \Winnt\ or \Windows folder
• Application and System Event logs (in EVT format)
• System Information (NFO format)
• TMPatch.log in C:\

For WFBS 8.0 and 9.0

• Windows\temp\*.log
• Windows\temp\WFBS_DEBUG\*.*
• System Event Log
• System Information (NFO format)

For WFBS 7.0

• Program Files\Trend Micro\Amsp\Debug\*.log
• Windows\temp\*.log
• Windows\temp\WFBS_DEBUG\*.*
• System Event Log
• System Information (NFO format)

For WFBS 6.0

• Ofcnt.log inside the \Winnt\ or \Windows folder
• Application and System Event logs (in EVT format)
• System Information (NFO format)

• ClientFolder\temp\upgrade.log
• Application and System Event logs (in EVT format)
• System Information (NFO format)

• %windir%\temp\Smex*.log
• %windir%\temp\Setup*.log
• %windir%\temp\SQL*.log
• \\source server\WinDir\OFCMAS.LOG
• \\source & target servers\WinDir\Temp\*.log
• \\source & target servers\TEMP\*.log
• \\target server\<MSA>\SMEX_DatabaseCreation.log
• \\target server\<MSA>\web_server_info.ini
• \\target server\<MSA>\Debug\*.log
• \\GC, DC, DNS, source and target servers\Application event logs
• \\GC, DC, DNS, source and target servers\System event logs
• \\source and target servers\ ==> IIS Manager ==> WinDir\system32\LogFiles\*\*.logs
• \\target server\ ==> regedit ==> HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\ScanMail for Exchange\*.log
• \\source and target servers\ ==> ipconfig /all ==> everything on the screen
• System Information (NFO format)