OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
6-40
Back Up Files Before Cleaning
If OfficeScan is set to clean an infected file, it can first back up the file. This allows you
to restore the file in case you need it in the future. OfficeScan encrypts the backup file to
prevent it from being opened, and then stores the file on the \Backup folder.
To restore encrypted backup files, see Restoring Encrypted Files on page 6-41.
Damage Cleanup Services
Damage Cleanup Services cleans computers of file-based and network viruses, and virus
and worm remnants (Trojans, registry entries, and viral files).
The client triggers Damage Cleanup Services before or after virus/malware scanning,
depending on the scan type.
• When Manual Scan, Scheduled Scan, or Scan Now runs, the client triggers Damage
Cleanup Services first and then proceeds with virus/malware scanning. During
virus/malware scanning, the client may trigger Damage Cleanup Services again if
cleanup is required.
• During Real-time Scan, the client first performs virus/malware scanning and then
triggers Damage Cleanup Services if cleanup is required.
You can select the type of cleanup that Damage Cleanup Services runs:
• Standard cleanup: The client performs any of the following actions during
standard cleanup:
• Detects and removes live Trojans
• Kills processes that Trojans create
• Repairs system files that Trojans modify
• Deletes files and applications that Trojans drop
• Advanced cleanup: In addition to the standard cleanup actions, the client stops
activities by rogue security software, also known as FakeAV. The client also uses
advanced cleanup rules to proactively detect and stop applications that exhibit
FakeAV behavior.
Note: While providing proactive protection, advanced cleanup also results in a high
number of false-positives.