To modify the Quarantine directory path:
- Go to the C:\Program Files\Trend Micro\OfficeScan\PCCSRV directory of the OfficeScan server.
- Open the OFCSCAN.ini file using a text editor.
- Under [INI_SERVER_SECTION], look for the "Quarantine_Folder" parameter and add the new folder location. By default, the value of this parameter is blank.
Quarantine_Folder=(drive/folder location)
Example: Quarantine_Folder=E:\Quarantined FilesMake sure that this custom folder location exists and contains the "Read & Write" folder permission for both IUSR and IIS_IUSRS(hostname\IIS_IUSRS) system accounts. - Save and close the OFCSCAN.ini file.
- Restart the OfficeScan Master Service.
To validate the changes, open the OfficeScan web console. You can also perform an EICAR malware test to see where the detected file(s) will be saved.
OfficeScan has no function to automatically clean and purge the Quarantine folder to prevent any incorrect deletion. It is suggested to regularly check the folder.