-
Uninstall Trend Micro OfficeScan Corporate Edition Client Manually
Posted on July 18th, 2009 No commentsTrend Micro OfficeScan is normally deployed in corporate network environment to provide endpoint security. Administrators can remotely uninstall the Office Scan client, and user at the workstation can uninstall the client program using built-in uninstall mechanism too (i.e. Add and Remove Program in Control Panel). If for some reason, the Office Scan client cannot or unable to uninstall, or user doesn’t have the required password to remove the OfficeScan client, try the following workaround to manually uninstall and remove Trend Micro OfficeScan.
- Go to Control Panel Services (services.msc), and stop the following services:
OfficeScanNT Listener
OfficeScanNT RealTimeScan
OfficeScanNT Personal Firewall (if enabled)- Run Registry Editor (regedit.exe).
- Navigate to the following registry key hive:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es
- Delete the following keys (if available):
Ntrtscan
Tmlisten
TmFilter
VSApiNt
TMPreFilter
TM_CFW
OfcPfwSvc- Navigate to the following registry hive:
HKEY_LOCAL_MACHINE \SOFTWARE\TrendMicro
or
HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node\TrendMicro (in 64-bit Windows operating system)
- Delete the following keys (if available):
OfcWatchDog
Pc-cillinNTCorp or OfficeScanCorp (depending on the client)
RemoteAgent
PC-cillin
CFW- Browse to the following registry key hive:
HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft\Windows\CurrentVersion\Run
- Delete the OfficeScanNT key.
- Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
- Restart the computer.
- Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.
Above steps work for OfficeScan 7.x client in Windows 2003/XP/2000/NT/Vista/2008 machine. For Trend Micro OfficeScan Corporate Edition (OSCE) - 5.58, OfficeScan Corporate Edition (OSCE) - 6.5, Client / Server / Messaging Suite for SMB - 2.0, follow these manual uninstallation steps instead.
- Delete the Trend Micro OfficeScan Client program shortcut in Start Menu, by right click on it and then choose Delete.
- Delete the installed files located in the OfficeScan folder under the \Program Files\Trend Micro\OfficeScan Client directory.
- Open the Registry Editor (regedit).
- Navigate to the following registry key:
HKEY_LOCAL_MACHINE\Software\TrendMicro
- Delete the following keys:
OfcWatchDog
PC-cillin
PC-cillinNTCorp- Also delete the following registry hives:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OfficeScanNT Monitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\OfficeScanNT
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ntrtscan HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\tmfilter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\tmlisten
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\TmPreFilter (for Win2003)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\VSApiNt- Right click on My Computer, click Manage and then select Device Manager.
- Enable the Show Hidden Devices option.
- Remove the following hidden devices in Non-Plug and Play Drivers tree pertaining to OfficeScan (right-click and select Uninstall):
Trend Micro VSAPI NT
Trend Micro FILTER
Common Firewall Driver
NTRTSCAN (if available)
TMLISTEN (if available)- Restart the OfficeScan client machine.
SOLUTION 2:
1.
Right-click on the OfficeScan system tray icon then select Unload OfficeScan. If you are asked for a password, enter the unload password then click OK. If you do not know the password, skip this step. 2.
Open the Windows Services console (services.msc). 3.
Stop the following services: •
OfficeScanNT Listener •
OfficeScanNT RealTime Scan •
OfficeScanNT Personal Firewall Note: The services will already be stopped if you were able to unload the OfficeScan client in Step 1. 4.
Click Start > Programs, right-click on Trend Micro OfficeScan Client then click Delete. 5.
Open the Registry Editor (regedit.exe). Important: Always make a back up copy of the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems. 6.
a.
Delete the following registry key(s): •
If only the OfficeScan client program is installed:
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro•
If there are other Trend Micro products installed:
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\NSC
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\OfcWatchDog
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorpb.
Delete the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OfficeScanNT c.
Delete the following registry value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Name: OfficeScanNT Monitor (REG_SZ)d.
Delete all instances of the following registry keys in the following locations: Locations: •
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services •
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services •
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services •
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services Keys: •
ntrtscan •
tmcfw •
tmcomm •
TmFilter •
Tmlisten •
tmpfw •
TmPreFilter •
TmProxy •
tmtdi •
VSApiNt •
ntrtscan 7.
Close the Registry Editor. 8.
Click Start > Settings > Control Panel then double-click System. 9.
Click the Hardware tab then click Device Manager. 10.
Click View > Show hidden devices. 11.
Expand Non-Plug and Play Drivers then uninstall the following devices: •
tmcomm •
Trend Micro Filter •
Trend Micro PreFilter •
Trend Micro TDI Driver •
Trend Micro VSAPI NT 12.
Uninstall the Common Firewall Driver: a.
Right-click on My Network Places then click Properties. b.
Right-click on Local Area Connection then click Properties. c.
On the General tab, select Trend Micro Common Firewall Driver then click Uninstall. For Windows Vista clients, do the following: a.
Right-click on Network then click Properties. b.
Click Manage network connections. c.
Right-click on Local Area Connection then click Properties. d.
On the Networking tab, select Trend Micro Common Firewall Driver then click Uninstall. 13.
Restart the computer. 14.
Delete the following directory: •
If only the OfficeScan client program is installed:
C:\Program Files\Trend Micro•
If there are other Trend Micro products installed: C:\Program Files\Trend Micro\OfficeScan Client