Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Virus Scan Engine in Worry-Free Business Security (WFBS) cannot detect copied EICAR test files in Real-time Scan mode

    • Updated:
    • 16 Dec 2015
    • Product/Version:
    • Worry-Free Business Security Standard/Advanced 7.0
    • Worry-Free Business Security Standard/Advanced 8.0
    • Worry-Free Business Security Standard/Advanced 9.0
    • Platform:
    • Windows 2008 Server R2
    • Windows 7 32-bit
    • Windows 7 64-bit
Summary

You are copying an EICAR test sample to Windows 7 Service Pack 1 or Windows Server 2008 environment but the Virus Scan Engine cannot detect the sample in Real-time Scan mode. However, the Virus Scan Engine can still detect testing samples whenever someone tries to access or execute them.

Details
Public

The issue is due to a sharing violation. When the violation occured, the file was locked thus the Virus Scan Engine cannot break it nor wait for it to be unlocked. This also causes performance concerns.

The issue can be solved by modifying the following registry key value:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSApiNt\Parameters]UseRtLock=1 (REG_DWORD)

Change the key to the default value = 0.

Important:

 
Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
Once this registry key is enabled, it may increase the posibility of file corruption due to this force scan behavior. Use this registry key carefully and make sure you are advised by Trend Micro Technical Support.
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1112147
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.