Manually removing the Client/Server Security Agent

Solution ID:	EN-127417
Product:	Client Server Messaging Security for SMB - 3.0, 3.5, 3.6; Client Server Security for SMB - 3.6, 3.5
Operating System:	Microsoft Small Business Server 2003; Windows Server 2003 Enterprise Edition; Windows Server 2003 Standard Edition; Windows Small Business Server 2003 R2; Windows XP; Windows 2000 Server
Published:	11/17/2008 10:28 PM

Problem:


This solution provides the procedure for manually removing the Client/Server Security Agent program from one of the following:
•	Remote workstation
•	Client Server Messaging Security for SMB (CSM) 3.x server
•	Client Server Security for SMB (CS) 3.x server

Solution:

Public


Please do the following:

Note: You may want to print this solution before continuing because it requires restarting the computer.
1.	Stop the following services:
	•	Trend Micro Client/Server Agent Listener
	•	Trend Micro Client/Server Agent Personal Firewall
	•	Trend Micro Client/Server Agent RealTime Scan
	If unable to perform Step 1, stop the services using Task Manager or Process Explorer from Sysinternal, and then remove the following files from system memory:
	•	Pccntmon.exe
	•	ofcpfwsvc.exe
	•	ntrtscan.exe
	•	tmlisten.exe
2.	Click Start > Programs.
3.	Right-click Trend Micro Client Server Security Agent and then click Delete.
4.	Open the Registry Editor (regedit.exe).
	Important: Always create a backup before modifying the registry. Incorrect registry changes may cause serious issues. Should this occur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.
5.	Go to the HKEY_LOCAL_MACHINE\Software\TrendMicro registry hive and delete the following:
	•	CFW
	•	OfcWatchDog
	•	PC-cillin
	•	PC-cillinNTCorp
6.	Go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall and delete the OfficeScanNT key.
7.	Go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and delete OfficeScanNT Monitor at the right pane of the registry editor.
8.	Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services and delete the following:
	•	ntrtscan
	•	ofcpfwsvc
	•	TMFilter
	•	TMListen
	•	TM_CFW
	•	TmPrefilter (for Windows 2003 only)
	•	VSApiNt
9.	Right-click My Computer and click Manage.
10.	Right-click Device Manager and go to View > Show hidden devices.
11.	Double-click Non-Plug and Play Drivers.
12.	Right-click each of these devices and then click Uninstall:
	Important: Do not reboot the computer at this point.
	•	Common Firewall Driver
	•	NTRTSCAN (if available) or Trend Micro Client/Server Agent RealTime Scan
	•	OfficeScan_Master_Setup_service
	•	TMLISTEN (if available) or Trend Micro Client/Server Agent Listener
	•	Trend Micro Client/Server Agent Personal Firewall (if available)
	•	Trend Micro FILTER
	•	Trend Micro PreFilter (for Windows 2003 only)
	•	Trend Micro VSAPI NT
13.	Restart the computer.
14.	Go to ..\Program Files\Trend Micro and delete the Client Server Security Agent folder.


Related Information:
•	Manually uninstalling the OfficeScan client
•	Manually uninstalling the Client/Server Security Agent from a computer running Windows Vista

Print This Solution

Rate this Solution

Did this article help you?

Yes No

Comments:

This form uses an automated system and does not provide feedback.