To enable debug logging:

1. Open a text editor (such as Notepad) on the target OfficeScan client and type the following lines:

   [DEBUG]
   DebugLevel=9
   DebugLog=<specify your preferred debug location and log filename>

2. Save the file as "ofcdebug.ini" file in the ..\Trend Micro\OfficeScan Client folder.
3. On the same folder, look for the LogServer.exe and run it.
    

   In Windows 7, Vista, and 2008, you need to run the file as Administrator to bypass the User Account Control (UAC) feature before generating the debug log file.
4. At this point, you can replicate the issue by starting the OfficeScan NT RealTime Scan service. This event will be captured in your debug logs, which will be useful for investigating the issue.
5. Disable ofcdebug logging by closing the command prompt and deleting the ofcdebug.ini file that you created.
6. Submit the acquired debug logs to Trend Micro Technical Support.