Novell Zen or ZCM is a full solution for the full lifecycle management of a Windows workstation, from initial imaging to deploying applications (bundles), policies (Group Policies, Dynamic Local User etc.), asset inventory and management/reconciliation of licensing and more.
OfficeScan Real-time Scan will then scan the following Novell directories:
- C:\Program Files\Novell\ZENworks\logs\ExternalStore
Files being scanned are .tmp and .log extensions. - C:\Program Files\Novell\ZENworks\cache\zmd\ZenCache\metaData
Files being scanned are .db extension. - C:\Program Files\Novell\ZENworks\logs
Files being scanned are .log extension. - C:\Program Files\Novell\ZENworks\cache\zmd
Files being scanned are .appstate extension
These files attribute to the slow log on performance.
To improve the log on process and resolve the issue, do the following:
- Exclude the following extensions and directories from the Real-time Scan.
- For OfficeScan 10.6, log on to the OfficeScan management console and go to Networked Computers > Client Management > Settings > Real-time Scan Settings.
For OfficeScan 11.0 and XG, log on to the OfficeScan management console and go to Agents > Agent Management > Settings > Scan Settings > Real-time Scan Settings. - Under Scan Exclusion, exclude the directories and file extensions below and then click Apply to All Clients.
Directories:- C:\Program Files\Novell\ZENworks\logs\ExternalStore
- C:\Program Files\Novell\ZENworks\cache\zmd\ZenCache\metaData
- C:\Program Files\Novell\ZENworks\cache\zmd
Extensions:- tmp
- log
- appstate
- For OfficeScan 10.6, log on to the OfficeScan management console and go to Networked Computers > Client Management > Settings > Real-time Scan Settings.
- Disable TSCAtStart by modifying ofcscan.ini from the OfficeScan server.
- Go to the default OfficeScan server installation directory. By default it is ..\Program Files\Tend Micro\OfficeScan\PCCSRV.
- Open the ofcscan.ini file using Notepad or any text editor.
- Look for the [Global Settings] section and apply this setting:
[Global Settings]
DisableTSCAtStart=1 - Save and close the file.
- In the OfficeScan management console, go to Global Settings to deploy the settings to the clients.
- On the client machine, restart the OfficeScan NT Listener service.
- Reboot the workstation.
- On the target workstation, stop the OfficeScan NT Real-time Scan service.
- Open the Registry Editor.Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
- Go to HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration\ and do the following:
- Set the following keys and their corresponding values:
ScanIncoming = 0
ScanNetwork = 0
VirusForbiddenFolderOnOff = 0 - Create a new DWORD key named "NTRtScanInitSleep" and set its value (Decimal) to "360000".
- Set the following keys and their corresponding values:
- Close the Registry Editor.
- Start the OfficeScan NT Real-time Scan service and reboot the machine.
- Delete the Cache files by going to Programs > Accessories > System tools > Disk Cleanup.
If the above steps did not resolve the issue, then do the following:
- Download the CDT utility.
- Run the CDT utility and collect the CDT logs.
- Send the files to Trend Micro Technical Support.