Knowledge Base

To manually uninstall the Security Server and the Client/Server Security Agent on a Security Server box, please do the following:

Note: You may want to print this solution before continuing as it requires a restart on the computer.

1. Stop the following services:

        • Trend Micro Client/Server Agent Listener    
        • Trend Micro Client/Server Agent Personal Firewall
        • Trend Micro Client/Server Agent RealTime Scan
        • Trend Micro Client/Server Agent Proxy Service 
        • Trend Micro Security Server Master Service
        • Trend Micro Unauthorized Change Prevention Service
        • Trend Micro Smart Scan Service

    If unable to perform Step 1, do the following:

        a. Stop the services using Task Manager or Process Explorer from Sysinternal.

        b. Remove the following files from system memory:

                • pccntmon.exe    
                • ntrtscan.exe       
                • tmlisten.exe         
                • pccnt.exe               
                • tm_pfw.exe            
                • cntaosmgr.exe
                • TMBMSRV.exe
                • tmproxy.exe
                • TMAS_OE.exe.exe
                • TMAS_OEMon.exe
                • Ofcservice.exe
                • ofcAoSMgr.exe

2. Open a DOS prompt window and go to the directory where the Security Server is installed.
   
        Example: C:\Program Files\Trend Micro\Security Server\PCCSRV

3. Enter these commands:
    
        • "SVRSVCSETUP -uninstall_PLM" - This removes the Trend Micro Plug-in Manager Service.

        • "SVRSVCSETUP -uninstall" - This removes the Trend Micro Security Server Master Service.

4. Close the DOS prompt window.

5. Disable sharing of the …\PCCSRV folder.

6. Click Start > Programs.

7. Right-click Trend Micro Client Server Security Agent, then click Delete.

8. Right-click Trend Micro Worry-Free Business Security, then click Delete.

9. Open IIS Manager and do one of the following:

        • If Trend Micro website is under Default Web Site, delete the OfficeScan and SMB folders.

        • If Trend Micro website is a separate virtual website, delete the OfficeScan folder under Web Sites.
    
        • Delete Smart Scan Server Virtual website under Web Sites.

10. Open the Registry Editor (regedit.exe).

       Important: Always create a backup before modifying the registry. Incorrect registry changes may cause serious issues. Should this occur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

11. Go to one of the following registry hives:

            For 32-bit OS: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro 

            For 64-bit OS: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro

      and delete everything under Trend Micro except for the following:

            • EUQ

            • ScanMail for Exchange

12. For 32-bit OS: Go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and delete OfficeScanNT Monitor and OE at the right pane of the registry editor.
           
      For 64-bit OS: Go to HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run and delete OfficeScanNT Monitor and OE at the right pane of the registry editor.

13. Go to one of the following registry hives:

      For 32-bit OS: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

      For 64-bit OS: Go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall 

      and delete the following keys:

            • OfficeScanNT    
            • Security Server
 
14. Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services and delete the following:

        • ntrtscan            
        • TM Filter        
        • ofcAoSMgr         
        • TMListen        
        • Ofcservice           
        • TMPFW        
        • tmactmon             
        • TmPrefilter (Windows 2003 only)
        • TMBMServer      
        • TMProxy             
        • Tmcfw                 
        • tmtdi            
        •  Tmcomm         
        • VSApiNT         
        • Tmevtmgr         
        • TMiCRCScanService

15. On the desktop, right-click My Computer, then click Manage.

16. Click the Device Manager, then right-click it again.

17. Click View > Show hidden devices.

18. Double-click Non-Plug and Play Drivers.

19. Right-click each of the following devices and click Uninstall:

     
     Important: Do not reboot the computer at this point.


            • tmactmon    
            • tmcomm
            • tmevtmgr
            • Trend Micro FILTER
            • Trend Micro PreFilter (Windows 2003 only)
            • Trend Micro TDIDriver
            • Trend Micro VSAPI NT

20. Go to My Network Places.

21. Right-click on the screen, then select Properties.

22. Right-click Local Area Connection, then click Properties.

23. Select Trend Micro Common Firewall Driver,  then click Uninstall.

24. Restart the computer.

25. Go to C:\Program Files\Trend Micro and delete the following folders

        • BM
        • Client Server Security Agent
        • Security Server
        • TrendProtect
        • TrendSecure

      Note: If any of the registry keys above cannot be removed, try again and restart the system.

If you need technical assistance, please contact Trend Micro Technical Support.