You can force an OSCE client/agent to send virus logs to the OSCE server using the first action "Clean Fail" and second action "Move Fail" if you need to troubleshoot virus reports or OSCE email notifications when the first two actions fail.
Do the following:
- Log on to the target OSCE client computer and go to ...\Trend Micro\OfficeScan Client\Misc.
- Open pccnt35.log and add the following line below:
20121228<;>114000<;>Eicar_test_file<;>14<;>1<;>0<;>C:\Temp\EICAR.COM<;>The leftmost 8 digits is in the date format YYYYMMDD and the next leftmost 6 digits is in the time format HHMMSS. Both can be changed according to your preference.
- Restart the OSCE client services.
- Verify that the bogus virus detection above exists by generating the Virus/Malware log.