OfficeScan 10 Administrator's Guide - Online Help Home - Trend Micro

Protecting Computers from Security Risks
TABLE 5-2. Files that OfficeScan can decrypt and restore (Continued)
FILE DESCRIPTION
Backed up
encrypted files
WARNING! Restoring an infected file may spread the virus/malware to other files and
computers. Before restoring the file, isolate the infected computer and
move important files on this computer to a backup location.
To decrypt and restore files:
If the file is on the OfficeScan client computer:
1. Open a command prompt and navigate to .
2. Run VSEncode.exe by typing the following:
VSEncode.exe /u
These are the backup of infected files that OfficeScan
was able to clean. These files are found in the \Backup folder. To restore these files,
users need to move them to the \SUSPECT\Backup folder.
OfficeScan only backs up and encrypts files before
cleaning if you select Backup files before cleaning in
Networked Computers > Client Management >
Settings > {Scan Type} > Action tab.
This parameter opens a screen with a list of files found under \SUSPECT\Backup.
3. Select a file to restore and click Restore. The tool can only restore one file at a time.
4. In the screen that opens, specify the folder where to restore the file.
5. Click Ok. The file is restored to the specified folder.
Note: It might be possible for OfficeScan to scan the file again and treat it as infected
as soon as the file is restored. To prevent the file from being scanned, add it to
the scan exclusion list. See Scan Exclusions on page 5-27 for details.
6. Click Close when you have finished restoring files.
5-37