Knowledge Base

Support

Manually uninstalling the Worry-Free Business Security (WFBS) Messaging Security Agent (MSA)

Solution IDLast Updated
1037503Date : 2012/02/2 Time: 10:56 PM (PST)


Product/VersionPlatform
Worry-Free Business Security Standard/Advanced - 5.1, 6.0, 7.0
Windows - 2000 Server, 2003 Standard Server Edition, 2008 Datacenter Server, 2008 Enterprise Server, 2008 Standard Server Edition, Vista 32-bit, XP Home

Problem Description

This article shows you how to manually uninstall the WFBS Advanced Messaging Security Agent (MSA). You can perform manual uninstallation when:
  • Installation failed and you are unable to re-install the MSA.
  • MSA upgrade failed.
  • You cannot unisntall the MSA from Control Panel > Add/Remove Programs.
  • You want to make sure that all the MSA components are removed from the system.

Solution

On the computer where the MSA is installed, please do the following:
Note: You may want to print this solution before continuing because it requires a restart of the computer.
  1. Stop the following services:
    • Trend Micro Messaging Security Agent EUQ Monitor
    • Trend Micro Messaging Security Agent Master Service
    • Trend Micro Messaging Security Agent Remote Configuration Server
    • Trend Micro Messaging Security Agent System Watcher
  2. Stop the SMEX Web site and then remove it from the IIS console or the Apache configuration file:
    WFBS 7.0 MSA does not use Apache Web server. Proceed to the next step if you are using this version.
    • If your web server is IIS
      1. Open the Internet Information Services (IIS) Manager.
      2. Click the SMEX Web Site.
      3. Click the Stop button.
      4. Click the Delete button.
        Open Internet Information Services
    • If you are using Apache as the web server and other applications are also using it
      1. Under the directory where Apache is installed, go to the Config folder.
      2. Open the Apache configuration file http.conf with a text editor like Notepad.
      3. Remove the web site information of the MSA.
        • If the Apache server was installed through the MSA installation program, remove the following information:
          • "# SMEX SSL - Start" ~ "# SMEX SSL -- End"
          • "# SMEX Virtual Path -- Start" ~ "# SMEX Virtual Path -- End"
        • If the Apache server was not installed through the MSA installation program (e.g. installed by Security Server or other application/users), remove the following information:
          • "#SMEX Listen Port - Start" ~ "#SMEX Listen Port -End"
          • "# SMEX Virtual Path -- Start" ~ "# SMEX Virtual Path -- End"
      Note: If the Apache server was installed through the MSA installation program, and you uninstalled the MSA before the Apache server, you will not be able to access the MSA configuration pages after reinstalling the MSA. This occurs because of a conflict in port 16372. Both the Apache server and Messaging Security Agent virtual web site listens to port number 16372.
    • If your web server is Apache and other applications are not using it, remove the Apache server using Start > Settings > Control Panel > Add/Remove Programs.
    Note: WFBS 7.0 MSA does not use Apache Web server. Proceed to next step if you are using this version.
  3. If you are using a 64-bit operating system, do Steps 3a-3c. Otherwise, proceed to Step 4.
    1. Click Start > All Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
    2. Run the following commands:
      • Uninstall-TransportAgent -Identity "ScanMail SMTP Receive Agent"
      • Uninstall-TransportAgent -Identity "ScanMail Routing Agent"
    3. Stop the Microsoft Exchange Transport service.
  4. Run the following commands to unregister the COM DLLs:
    • regsvr32 -u "C:\Program Files\Trend Micro\Messaging Security Agent\hookSMTP.dll"
    • regsvr32 -u "C:\Program Files\Trend Micro\Messaging Security Agent\perfSmexPerfMonMgr.dll"
  5. Remove the entire installed directory of the MSA, except the Apache2 subfolder. This is located by default in ..\Program Files\Trend Micro\Messaging Security Agent.
    If the installed directory is locked by other programs, stop the IIS service and try again.
    Note: Installing the Apache server during the installation of the Messaging Security Agent will create the Apache2 subfolder. However, do not remove the Apache2 subfolder if other applications are using the Apache server.
  6. Delete the registry keys related to or created by the MSA:
    Important: Always create a backup before modifying the registry. Incorrect registry changes may cause serious issues. Should this occur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.
    • Product registry key in HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange
    • For 64-bit OS: HKLM\SOFTWARE\Wow6432Node\TrendMicro\ScanMail for Exchange
    • Virus scan registry key in HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\VirusScan
    • Virus scan registry key for each mailbox store (if there are):
      • HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\<Computer_Name or VS_Name>\<Store_Name>\VirusScanBackgroundScanning
      • HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\<Computer_Name or VS_Name>\<Store_Name>\VirusScanEnabled
      • HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\<Computer_Name or VS_Name>\<Store_Name>\VirusScanProactiveScanning
    • Service registry keys (if there are):
      • HKLM\SYSTEM\CurrentControlSet\Services\EUQ-Monitor
      • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_Master
      • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_RemoteConfig
      • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_SystemWatcher
  7. Delete the Trend Micro Messaging Security Agent shortcut from the Start > Programs menu.
  8. Remove the MSA from the Security Server:
    1. Open the WFBS Advanced console on the Security Server.
    2. Click the Security Settings tab and then choose the offline Messaging Security Agent from the client management tree.
    3. Click Remove and then choose the Remove the selected inactive agent(s) option.
    4. Click Apply.
  9. Remove the Uninstall Entry from the Add/Remove Progams console by deleting the HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SMEX_{PRODUCT_ID} registry key.
  10. Restart the computer.
    During the MSA installation, the Active Directory (AD) security group "SMEX Admin Group" and the user account "SMX_<Server_Name>" are created in the Global Catalog on the server. If you want to remove these, do the following:
    Note: If you want to remove "SMEX Admin Group", make sure that it has no other account members.
    1. Click Start > Programs > Administrative Tools > Active Directory Users and Computers.
    2. Select SMEX Admin Group, right-click it, and then click Delete.
    3. Select SMX_<Server_Name>, right-click it, and then click Delete.
    When the user account is deleted, manually remove the user profile from the server:
    1. On your desktop, select the My Computer icon and right-click it, then click Properties.
    2. On the System Properties window, click the Advanced tab.
    3. Under User Profiles section, click Settings.
    4. Select SMX_<Server_Name> from the list.
    5. Click Delete.
    For 64-bit OS: If you want to uninstall the SQL Server, click Start > Settings > Control Panel > Add/Remove Programs.


Rate this Solution
Did this article help you?  
 
 Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on