Topic Last Modified: 2006-06-22

The Microsoft® Exchange Server Analyzer Tool reads the following registry entry to determine the value for ModuleName:

HKEY_LOCAL_MACHINE\Software\TrendMicro\ScanMail for Exchange\Tools\Debug

The ModuleName registry value represents the name of the debug module file in use.

The Exchange Server Analyzer also reads the following registry entry to determine if Virus Scanning API (VSAPI) message scanning is enabled:


A value of 1 for Enabled indicates that VSAPI scanning is enabled. A value of 0 indicates VSAPI scanning is not enabled.

If the Exchange Server Analyzer finds VSAPI scanning is enabled and that the ModuleName registry value is not empty or null, a warning is displayed.

Running in debug mode causes substantial performance degradation because of the background diagnostic tracing involved. Unless you are actively troubleshooting a problem that requires you to run ScanMail for Exchange in debug mode, you should turn off debug mode.

This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore the registry if a problem occurs. For information about how to restore the registry, view the "Restore the Registry" Help topic in Regedit.exe or Regedt32.exe.

To correct this warning

  1. Open a registry editor, such as Regedit.exe or Regedt32.exe.

  2. Navigate to: HKLM\Software\TrendMicro\ScanMail for Exchange\Tools\Debug.

  3. In the right pane, double-click ModuleName.

  4. Delete the value data for this entry, leaving the string blank. Do not delete the ModuleName key.

  5. Close the registry editor and restart the ScanMail_RealTimeScan service and the Microsoft Exchange Information Store service for the change to take effect.

Before you edit the registry, and for information about how to edit the registry, read the Microsoft Knowledge Base article 256986, "Description of the Microsoft Windows Registry" (

For more information about verifying that debug mode has been disabled, see Trend Micro Solution ID 119149 (

The third-party Web site information in this topic is provided to help you find the technical information you need. The URLs are subject to change without notice.