Schedule Scan Tasks with Trend Micros

Dear Experts,

I had configured trend-micro to be executed at certain time of the day on the server. I've also noticed that trend-micro would be running not on a scheduled time. This could cause a slow down with the network.

What are some possible reasons that Trend Micro may run something outside of the scheduled time?

Is there a way to tell what was triggering the Trend Micro to run?
kisegiAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Duncan RoeSoftware DeveloperCommented:
Are you certain that trend-micro is starting out of schedule or simply continuing to run?
ps will tell you - check the elapsed time column.
I assume you are running this under Linux since you put a Linux tag on this Q - are you? (I couldn't see any mention of Linux support on Trend Micro's web page).
If running under Windows, excessive run time is still possible but I'm not sure how you check process elapsed time. I've found process explorer to be very good but don't remember seeing an elapsed time column (it's at work).
0
Gerwin Jansen, EE MVETopic Advisor Commented:
Can you let us know which Trend Micro product you are running? ServerProtect is available for Linux.

When you see 'unexpected' scans on a Linux system, the most likely cause is a cron job that is scheduled to start a certain activity at a certain time. To check your (existing) cron jobs under Linux, give this command (as the user that installed ServerProtect):

# crontab -l

If you see Trend Micro related entries, kindly post them.
0
Duncan RoeSoftware DeveloperCommented:
If you don't straight away see an entry referring to ServerProtect or whatever in crontab -l but you do see entries like
47 * * * * /usr/bin/run-parts /etc/cron.hourly 1> /dev/null

Open in new window

be sure to check the directory /etc/cron.hourly. Similarly, check cron.daily, cron.weeklycron.monthly - any directory serviced by run_parts.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kisegiAuthor Commented:
Hi experts,

Sorry that I didn't specify the operating system.

 I am using Window Server 2008. The Trend Micro version is called Worry-Free Business Security.

I've noticed the service named corServiceShell.exe from Trend Micro was running. I was wondering what triggers this event to happen which the process took a big chunk of CPU usage.

Thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.