Trend Micro - Securing Your Journey to the Cloud Business
Support
Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Manually restoring backup files after a failed restoration process in Worry-Free Business Security, OfficeScan, and WFBS-SVC

    • Updated:
    • 25 Apr 2019
    • Product/Version:
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Worry-Free Business Security Services 5.7
    • Worry-Free Business Security Services 5.8
    • Worry-Free Business Security Services 6.1
    • Worry-Free Business Security Services 6.2
    • Worry-Free Business Security Services 6.3
    • Worry-Free Business Security Services 6.5
    • Worry-Free Business Security Services 6.6
    • Worry-Free Business Security Standard/Advanced 9.0
    • Platform:
    • Windows 2012 Enterprise
    • Windows 8.1 32-bit
    • Windows 8.1 64-bit
Summary

Worry-Free Business Security (WFBS), OfficeScan (OSCE), and Worry-Free Business Security Services (WFBS-SVC) will restore the files that are already encrypted or modified by the ransomware process after detection. File restoration fails sometimes because the process locks the file due to unknown reasons. If the backup file is working but its restoration fails even after restarting the computer, you can manually restore it.

This feature is only available in WFBS 9.0 Service Pack 3 and OfficeScan 11.0 Service Pack 1 Critical Patch 6054, and OfficeScan XG.

Details
Public

To manually restore the file:

  1. Go to the folder where the file restoration failed.
  2. Find the backup file (XXXXXXXXX.dre. EX:4100_3_5483BAD.dre) on the folder.
  3. Change the file extension to the same file name that failed to be restored (e.g. change the file name of 4100_3_5483BAD.dre to 4100_3_5483BAD.txt).
     
    You may find the original extension from detection logs.
  4. Open the file and check the content of the file.
Premium
Test Now
Internal
Rating:
Category:
Configure
Solution Id:
1111386
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.
Related Articles