No. Trend OfficeScan is available for University owned computers only. The antivirus software available to UW faculty, staff, and students for personally owned computers is called PC-cillin Internet Security and is available at no cost to the end user. See the PC-cillin Internet Security FAQ (www.uwyo.edu/askit/displaydoc.asp?askitdocid=572&parentid=1) for further information.

Note that Windows 9x (95, 98, Me) and Windows NT systems are no longer supported by OfficeScan 8.0. Intel IA64 (Itanium) processors are not supported, but the AMD x86_64 and Intel x86_64 architectures are supported.

NOTE: OfficeScan is not supported on personally owned computers. For personally owned computers, PC-cillin Internet Security is the antivirus software provided at no cost to all UW faculty, staff, and students. See the PC-cillin Internet Security FAQ (www.uwyo.edu/askit/displaydoc.asp?askitdocid=572&parentid=1) for further information on this software.

On-Campus Ethernet Connection

See How to Install and Update OfficeScan (http://www.uwyo.edu/askit/displaydoc.asp?askitdocid=202&parentid=1)

UW Wireless Connection

See How to Install and Update OfficeScan from a UW Wireless Connection (www.uwyo.edu/askit/displaydoc.asp?askitdocid=205&parentid=1).

UW Dial-up Connection

See How to Install and Update OfficeScan from a UW Dial-Up Connection (www.uwyo.edu/askit/displaydoc.asp?askitdocid=203&parentid=1).

UW DSL Connection

The use of OfficeScan with a UW DSL connection is not supported at this time due to connection and compatibility issues.

Non-UW Internet Connection

See How to Install and Update OfficeScan from a Non-UW Internet Connection (www.uwyo.edu/askit/displaydoc.asp?askitdocid=204&parentid=1).

Open OfficeScan (right-click the OfficeScan icon next to your clock) and select Component Versions. Note the Virus pattern version number. Compare your number with Trend Micro's OfficeScan Web site (http://www.trendmicro.com/download/pattern.asp).  

If your pattern file number does not match that on Trends' Web site, update OfficeScan. For instructions on updating OfficeScan, see the section specific to your connection type in the FAQ, How do I install/update OfficeScan antivirus protection? (www.uwyo.edu/askit/displaydoc.asp?askitdocid=547).  Double-check the pattern file number again once the update has completed.

Right-click the Officescan icon and select Scheduled Scan Advanced Settings. Select stop scanning and click OK.

Information Technology has discovered that OfficeScan is not updating automatically on many computers. To resolve this issue, click on the following link and reboot your computer after the command window has closed. This will reset the Windows Firewall included in Windows XP Service Pack 2 to allow access from IT’s antivirus server. It is necessary to do this on all University of Wyoming computers that run the Windows XP Service Pack 2 operating system. If you use the Windows operating system and are unsure of the version, run the command anyway.

\\uwapps.uwyo.edu\patches\OfficeScan\ImageFix\firewall_fix.cmd

(Clicking this link only works in Internet Explorer browsers. You can alternatively type the link into the Run window from the Start button.)

1. Login to the computer with an account that has administrative rights.
2. Click the Start menu button.
3. Click Control Panel.
4. Click Security Center.
5. Click Windows Firewall.
6. Select the Advanced tab.
7. In the Network Connection Settings section, select a connection, and click the Settings button.
8. In the Advanced Settings window, check OfficeScanNT Listener, and click OK twice.
9. If more than one connection is listed, repeat steps 7 and 8 for each connection listed.
10. Click OK to close all remaining open windows.
11. Reboot your computer.

Detailed information:

Information Technology recently discovered that Trend Micro OfficeScan Antivirus was not updating properly on computers set up using the Information Technology Imaging Set Utilities. While investigating the cause of this problem, it was also discovered that updates were not being received on any computer where the antivirus program was installed prior to the Windows Firewall included in Windows XP Service Pack 2.

The above instructions and link allow access through port 2412 in the Windows Firewall permitting IT’s antivirus server to communicate with the clients.

• The firewall change only needs to be made on computers running Windows XP Service Pack 2.
• This fix is not required for Windows 2000, XP, or XP SP1 computers, as they do not have the added protection of the Windows Firewall.
• To determine the Windows Operating System version and level, follow the instructions at http://www.uwyo.edu/ASKIT/displaydoc.asp?askitdocid=242&parentid=1.
• Running this command on non-XP SP2 computers may produce an error message; however, it does not affect any settings.
• You must be logged into the computer with an account that has administrative rights to run the command or manually fix the firewall.
• You must have access to the \\uwapps network share to run the command.
• You can finish the process by right-clicking the blue antivirus icon in the lower right-hand corner of your screen near the clock and selecting Update Now!; however, Information Technology recommends rebooting your computer.
• You should run the command or manually fix the firewall on all Windows XP Service Pack 2 computers for which you are responsible.
• Other third-party firewall programs may also prevent this connection. If you have a third-party firewall installed on your computer, you should set it to allow connections from all on-campus IP addresses through port 2412.

OfficeScan is scheduled to run a scan every Tuesday night starting at midnight.  For security reasons, it is recommended that you exit all programs, then logoff and restart the computer, or simply lock your computer (Cntl-Alt-Del for most Windows computers, and choose Lock Computer).

• Right-click on the Officescan [can you add the icon picture here?] icon in the bottom right corner of the screen and select OfficeScan Console.
• In the Trend Micro OfficeScan console, click on the Logs tab
• Choose which logs and dates to review, and click on View Logs

When OfficeScan's Real-Time Scan Monitor detects a virus, it will notify you with a popup dialog box letting you know a virus has been found.  

The dialog box will list the infected file(s), the name of the virus, and whether OfficeScan was able to clean and/or delete the file(s). By default, OfficeScan’s first action will be to clean the infection, which means that it will remove the infection from the file but leave the rest of the file intact for normal use. If OfficeScan is unable to clean the file, by default, OfficeScan attempts to delete the infected file. If OfficeScan is unable to delete the file, then no other action is performed, and the infected file remains on the computer. This case is rare and most likely occurs for one of two reasons. The first is when OfficeScan is installed on an already infected computer. The second is when the virus is embedded into a Zip file. OfficeScan is unable to delete infected files contained inside Zip files. If an infected file is unable to be deleted, user intervention is required to remove the virus from the computer.

When OfficeScan reports a virus is found, the first and second actions attempted will be listed in the Action column, with the second action recorded in parentheses. For instance, if OfficeScan reports an action of "Unable to clean (Deleted)", this means the virus could not be cleaned from the file, so the file was deleted. If OfficeScan reports an action of "Unable to clean, (Deleted failed)", this means the virus could not be cleaned or deleted and user intervention is necessary to manually remove the infected file(s). For information regarding manual virus removal, please contact your IT user consultant (http://www.uwyo.edu/infotech/css/cssuser.htm).

Yes. If OfficeScan's Real-time Scan Monitor is enabled and configured to scan the e-mail attachment’s file type, OfficeScan should be able to intercept the virus before it is executed from within an Outlook e-mail message.

The scan monitor is running if the OfficeScan icon in the System Tray (lower right corner of the Desktop, by the clock) has a blue background, with a yellow line through it, or .

If no icon is displayed, or your icon has a solid red background, , Real-Time protection is not running. Contact your IT user consultant.

OfficeScan contains an undocumented bug, where an uninstall password is sometimes required. The problem occurs when the OfficeScan client cannot communicate with the server to determine if an uninstall is password protected or not. The client application resorts to using the initial password set for the OfficeScan Management Console during the server installation process.  

• If you initially installed OfficeScan 3.x, the uninstall password is newHouse (note the capital H).
• If you initially installed OfficeScan 5.x, the uninstall password is password.

Each OfficeScan client contains a unique identifier. This identifier is used to communicate with the OfficeScan server for updates. Therefore, if many OfficeScan clients contain the same identifier, only one of them will update. There are two solutions to this problem.

Install the OfficeScan client after imaging every computer. Since the OfficeScan installation occurs after imaging, each client will receive a unique identifier.

OR

OfficeScan can be installed on a computer prior to creating an image; however, you must use the OfficeScan Image Setup Utility (Imgsetup.exe). This utility is located on the UW Network at \\antivirus\install\Image Setup Utility. Just prior to saving a computer's image, copy imgsetup.exe to a permanent location on the local computer, and run it. When each imaged computer starts up and the first user logs in, the local imgsetup.exe will automatically execute again, change the computer's OfficeScan identifier so that it is unique, and then notify the OfficeScan server of the change.

On Windows XP SP2, the installation of OfficeScan opens port 2412 on the Windows Firewall. This allows the OfficeScan server to notify OfficeScan clients to update on demand. If the port does not remain open, automatic updates may not work properly. If you are using Microsoft Sysprep or any other image configuration software that may reset firewall settings at setup time, you will need to make sure port 2412 on the Windows Firewall remains open for communication from the OfficeScan server.