Using the Manual Vulnerability Assessment Tool

Trend Micro provides a Manual Vulnerability Assessment Tool for the following Microsoft Windows based machines:

• Windows ME/98/95

• Windows XP Home or Professional Edition

• Windows NT 4 Server/Workstation with Service Pack 6 or later

• Windows 2000 Professional/Server/Advanced Server with Service Pack 3 or later

• Windows 2003 Server Standard/Enterprise Edition

The system administrator can make this tool available to users who are using computers that have the Unsupported, Deploy failed or Unassessed status. Users can then manually assess their own machines.

To perform a manual assessment:

1. From the client machine you wish to clean up, go to the following URL:

http://CM Server/ControlManager/cgi-bin/va/CGIvax.exe

Where "CM Server" is the name of the name of the Control Manager Server where Vulnerability Assessment is installed. The Trend Micro Manual Vulnerability Assessment page appears.

2. Click Start Vulnerability Assessment to run an Assessment Task on the local machine. The assessment progress bar appears displaying the name of the target machine and the status of the task. Click Stop to interrupt the task.

3. When you click Start Vulnerability Assessment, ActiveX controls deploy to your computer to perform the assessment. The Security Settings in your browser must be set to medium for Internet and Medium for local intranet to allow ActiveX controls to download (these are the default settings for Internet Explorer 6). Refer to Internet Explorer help for more information about setting your browser security level)

3. When the task is complete, it displays the result of the Assessment Task and lists the names of the vulnerabilities it found.

4. The Vulnerability Assessment task log is updated based on the manual Assessment Task. This log is stored on the Control Manager server. You can view the updated status by creating a custom query that includes the computer that was manually assessed.