Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Processes owned by Worry-Free Business Security (WFBS)

    • Updated:
    • 4 Mar 2021
    • Product/Version:
    • Worry-Free Business Security Advanced 10.0
    • Worry-Free Business Security Standard 10.0
    • Worry-Free Business Security Standard/Advanced 9.0
    • Worry-Free Business Security Standard/Advanced 9.5
    • Platform:
Identify the processes owned by WFBS and know what they are for.
Trend Micro Security Server Master Service

The Trend Micro Security Server Master Service, or OfcService.exe, is the central management component of WFBS network.

It processes commands to and from the agents and the web console. Through this service, the following functionalities are provided for the MSA and SA:

  • Storage for agent configuration settings
  • Consolidate agent logs
  • Serve as the default source for update components (For example: patterns, engine, etc.)

The DbServer.exe is the Security Server database running process.

The Security Server database is the central repository that maintains data of agent activities such as virus and other threat management rules and policies applied to the agent. The database includes update information on patterns and engines as well.

Trend Micro Smart Scan Service
The Smart Scan Service, or iCRCService.exe, is the master service for the Integrated Smart Scan Server. It handles communication between a client's iCRCHandler and the server's activities. Stopping the Security Server Master Service simultaneously stops iCRCService.exe.
Trend Micro Plug-in Manager Service

The Trend Micro Plug-in Manager Service, OfcAoSMgr.exe, prepares token-value pair, enumerate plug-in information, and specify the UI control.

By default, it is installed. However, the GM release of WFBS is not bundled with plug-in services. To use Plug-in Manager, separate installations of plug-in services must be performed

SA Monitor / Trend Micro Client Main Console

This component is responsible for interfacing with the client user. It is responsible for:

  • Starting the SA Console (PccNT.exe)
  • Displaying the client icon on the system tray
  • Sending quarantine files to the server
  • Displaying alerts
  • Detecting Internet Explorer proxy settings

This is done as part of auto-proxy detection functionality. IE settings can be used for Internet connectivity for Web Reputation Service and Active Update functionality.

SA Console / Trend Micro Security Agent Monitor
This is the SA Console program. PccNTMon.exe calls this process to display the SA information in the Security Dashboard and execute modified user settings on client computers.
Plug-in Manager
AosUImanager.exe is responsible for interfacing with the server-side Plugin Manager component.
Trend Micro Security Agent Listener
This service is responsible for receiving commands and notifications from the server. TmListen is responsible for the following functionality:
  • Client-server communication
  • Update
  • Component startup
  • Log delivery
Trend Micro Security Agent Real-time Scan
This service is responsible for Manual, Scheduled, and Real-time scan function. It also uses Predictive Machine Learning modules in performing real-time scanning functionalities
Trend Micro Security Agent Proxy Service

This service is responsible for Web threat security and POP3 scan functionalities. TmProxy is responsible for receiving HTTP connections that the Trend Micro TDI driver intercepts as part of Web threat functionality.

Upon receiving information about the connection, TmProxy uses the URL filtering engine to obtain a credibility rating, from Trend Micro, for the Web site that is being accessed. Depending on the rating that is returned, TmProxy can block or permit access to the site.

Only available in base Windows 2008
Trend Micro Security Agent Firewall
This service is responsible for client firewall functionality.
Trend Micro Unauthorized Change Prevention Service
This service is responsible for the AEGIS module. It also loads the falcon module used for Behavior Feature collection of Predictive Machine Learning
Messaging Security Agent (MSA) is available only in WFBS Advanced.
Trend Micro Messaging Security Agent Master Service
This is the main component of MSA, which handles all the major processing inside the product.
Trend Micro Messaging Security Agent Remote Configuration Server
This provides the user identity and the mechanism for configuration replication between MSA systems.
Trend Micro Messaging Security Agent System Watcher
This acts as a watchdog program for monitoring the status of ScanMail system.
Trend Micro Messaging Security Agent Monitor

Not available in Junk Email Integration

The End User Quarantine (EUQ) is a Trend Micro module responsible for moving spam messages to a user's spam folder.

This service is used by End User Quarantine (EUQ) spam management solution.

Disabled, not supported.

Solution Id:
Did this article help you?

Thank you for your feedback!

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.