Performing a manual update or rollback of the OfficeScan scan engine

  • Updated:
    • 20 Jun 2016
  • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
  • Platform:
    • Windows 2000 Advanced Server
    • Windows 2000 Professional
    • Windows 2000 Server
    • Windows 2003 Enterprise Server
    • Windows 2003 Standard Server Edition
    • Windows 2012 Standard
    • Windows 2012 Standard R2
    • Windows Vista 32-bit
    • Windows XP Professional
Summary

If you are having problems with the current OfficeScan Scan Engine (such as the Trend Micro VSAPI NT service failed to start), you can perform a manual update or rollback for both the OfficeScan server and client.

This solution is also applicable to OfficeScan environments which has outdated Scan Engine and having difficulty in updating them via the OfficeScan management console.

Details
Public
  1. Go to the Trend Micro Scan Engine Updates page and download the latest Scan Engine for Windows Kernel 32-bit (vsapi-KD-x.xxx-yyyy.zip). If you want to perform a manual rollback, download a previous version of the Scan Engine or use an existing backup.
  2. Rename the ZIP file to "tmengNT.zip".
  3. Extract the contents of the tmengNT.zip file to the ..\PCCSRV\pccnt\drv folder.
  4. Copy the tmengNT.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.
  5. Rename the tmengNT.zip file in the ..\PCCSRV\Download\engine folder to "eng_ntkd.zip".
  6. Check the properties of the eng_ntkd.zip file then note its file size in bytes.
  7. Open the ..\PCCSRV\Download\server.ini file in a text editor.
  8. Under the "[ENGINE]" section, change the values of the following parameters:

    [ENGINE]
    Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz
    E.10=VSAPI32_NT_KD,engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz

    where x.xxx is the Scan Engine version, yyyy is the build number, and zzzzz is the file size in bytes.

    For example: Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, 8.550, 805426
    E.10=VSAPI32_NT_KD, engine/eng_ntkd.zip, 8.550, 805426

  9. If you are updating Officescan 10, the zip file names will be different and will not be eng_ntkd.zip.

    Take note of the lines and rename them accordingly.

    For example: If you see Path_VSAPI32_NT_KD=engine/eng901ntkd.zip, rename it to Path_VSAPI32_NT_KD=engine/eng_ntkd.zip.

  10. Save and close the file.

To update the version in the Dashboard page:

  1. Open the ..\PCCSRV\ofcscan.ini file in a text editor.
  2. Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineNT_Version" parameter to x.xxx.yyyy (the version and build number of the Scan Engine).
  3. Save and close the file.

To update the version in Updates > Summary page:

  1. Open the ..\PCCSRV\Private\component.ini file in a text editor.

  2. Under "[6104]" section, change the "Version" value:
     
    The current value is the decimal equivalent of the Scan Engine version.

    For Example:
    Scan Engine: 8.550.1001
    Hex = 85500
    Dec = 546048

    The next value in "Version", after the decimal value, will follow the yyyy or the build number of the Scan Engine. The next value (0) will stay as is.

    [6104]
    ...
    ComponentName=Virus Scan Engine (32-bit)
    Version=546048 1001 0
  3. Save and close the file.
  1. Go to the Trend Micro Scan Engine Updates page and download the latest Scan Engine for Windows Kernel 64-bit (vsapi-KD-x.xxx-yyyy.zip). If you want to perform a manual rollback, download a previous version of the Scan Engine or use an existing backup.
  2. Rename the ZIP file to "tmengNT.zip".
  3. Extract the contents of the tmengNT.zip file to the ..\PCCSRV\pccnt\drv folder.
  4. Copy the tmengNT.zip file to the ..\PCCSRV\Download and ..\PCCSRV\Download\engine folders.
  5. Rename the tmengNT.zip file in the ..\PCCSRV\Download\engine folder to "eng_ntkd.zip".
  6. Check the properties of the eng_ntkd.zip file then note its file size in bytes.
  7. Open the ..\PCCSRV\Download\server.ini file in a text editor.
  8. Under the "[ENGINE]" section, change the values of the following parameters:

    [ENGINE]
    Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz
    E.10=VSAPI32_NT_KD,engine/eng_ntkd.zip, x.xxx.yyyy, zzzzz

    where x.xxx is the Scan Engine version, yyyy is the build number, and zzzzz is the file size in bytes.

    For example: Path_VSAPI32_NT_KD=engine/eng_ntkd.zip, 8.550, 805426
    E.10=VSAPI32_NT_KD, engine/eng_ntkd.zip, 8.550, 805426

  9. If you are updating Officescan 10, the zip file names will be different and will not be eng_ntkd.zip.

    Take note of the lines and rename them accordingly.

    For example: If you see Path_VSAPI32_NT_KD=engine/eng901ntkd.zip, rename it to Path_VSAPI32_NT_KD=engine/eng_ntkd.zip.

  10. Save and close the file.

To update the version in the Dashboard page:

  1. Open the ..\PCCSRV\ofcscan.ini file in a text editor.
  2. Under "INI_PROGRAM_VERSION_SECTION", change the value of the "EngineNT_Version" parameter to x.xxx.yyyy (the version and build number of the Scan Engine).
  3. Save and close the file.

To update the version in the Updates > Summary page:

  1. Open the ..\PCCSRV\Private\component.ini file in a text editor.

  2. Under "[6104]" section, change the "Version" value:

     
    The current value is the decimal equivalent of the Scan Engine version.

    For Example:
    Scan Engine: 8.550.1001
    Hex = 85500
    Dec = 546048

    The next value in "Version", after the decimal value, will follow the yyyy or the build number of the Scan Engine. The next value (0) will stay as is.

    [6104]
    ...
    ComponentName=Virus Scan Engine (32-bit)
    Version=546048 1001 0

  3. Save and close the file.
  1. Go to the Trend Micro Scan Engine Updates page and then download the latest Scan Engine for Windows NT/2000/XP (vsapi-KD-x.xxx-yyyy.zip).
  2. Stop the following services:
    • OfficeScan NT Listener
    • OfficeScanNT Real-time Scan 

    To do this:

    1. Click Start > Run > type in "services.msc". The service window will open.
    2. Scroll down and select the OfficeScan NT Listener Service.
    3. Right-click on the OfficeScan NT Listener Service and then click Stop.
    4. Repeat steps 2 and 3, but this time for the OfficeScan Real-time Scan Service.
  3. Create a back up of the following files in the C:\Program Files\trendmicro\OfficeScan Client folder.
    • tmfilter.sys
    • vsapint.sys
    • tmpreflt.sys
    • tmxpflt.sys
  4. Extract the contents of the downloaded zip file to the :\Program Files\trendmicro\OfficeScan Client folder.
  5. Start the following services:
    • OfficeScan NT Listener
    • OfficeScanNT Real-time Scan
Premium
Internal
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.