Summary
Update the VSAPI pattern, spyware pattern and scan engine on IMSS. This is also useful when you have a secure server that is not allowed to have Internet connection, but you want to manually update it with the latest components on a daily basis.
Details
You can only manually update the components that are publicly available on the Trend Micro website. These are the main pattern file, spyware pattern file, and scan engine. The scan engine is released quarterly so there is no need to update it on a daily basis.
To manually update:
- Log on to the IMSS console and disable the scheduled update.
- Open your Windows Explorer and go to ..\IMSS\config.
- Open and edit the imss.ini file using a text editor.
- Change the value of the "enable_au_monitor_thd" parameter to "no".
enable_au_monitor_thd=no
- Save and close the imss.ini file.
- Restart the Trend Micro IMSS Manager service to reflect the changes in the setting.
- Stop the Trend Micro IMSS Scan Service.
- Download the VSAPI pattern file (virus pattern file – Windows) and spyware pattern file (not the DA6).
- Extract the contents (lpt$vpn.xxx and ssaptn.xxx) of the zipped files (VSAPI and spyware pattern) to ..\imss\lib\pattern\vsapi.
- Since scan engine is not released on a daily basis, you may download the latest scan engine quarterly or twice a year.
- Extract the contents of the scan engine zip file to the ..\imss\bin folder.
- Using Windows Explorer, go back to the ..\IMSS\config folder.
- Open the scanner.info file using Notepad.
- Change the pattern version to reflect the new version of the files you just downloaded. There is no need to change the timestamp section.
Note: If you updated the scan engine, then you also need to modify the scan engine version in the file.
- Save and close the scanner.info file.
- Start the Trend Micro IMSS Scan Service.
- Change the value in the tb_global_settings to reflect the correct version in the IMSS console.
Note: The tb_global_settings names for the pattern and engine starts with version, i.e. VersionVirusPattern.
- Run the following command using the SQL manager or qtodbc:
update tb_global_setting set value='Y.YYY.YY' where name='VersionVirusPattern'This is the name for virus pattern:VersionVirusPattern = virus pattern
VersionVirusEnginer = scan engine
VersionSpywarePattern = spyware/grayware patternFor example:update tb_global_setting set value='7.233.00' where name='VersionVirusPattern'
update tb_global_setting set value='9.120.1004' where name='VersionVirusEngine'
