Manually uninstalling ScanMail for Exchange (SMEX) 10 from Exchange 2003 Server

Solution ID Last Updated
1057034 Jan. 14, 2012 4:51 AM (PST)

Product / Version Platform
ScanMail for Exchange - 10.0;
Windows - 2003 Datacenter Server, 2003 Enterprise Server, 2008 Datacenter Server, 2008 Enterprise Server, 2008 Small Business Server

Problem Description

This article provides the procedure on how you can manually remove SMEX 10 from Exchange 2003 server, including cluster server, in case of the following:
  • Upgrade failed on the first attempt and you are unable to reinstall the product
  • You are unable to uninstall from the Add/Remove Programs
  • You want to make sure that all components of SMEX have been removed


Please do the following:
  1. Stop the following ScanMail-related services:
    • ScanMail for Microsoft Exchange Master Service
    • ScanMail for Microsoft Exchange Remote Configuration Server
    • ScanMail System Watcher Service
    • ScanMail EUQ Monitor (This service only exists if End User Quarantine (EUQ) is installed.)
    • ScanMail EUQ Migrator service (This service only exists if the upgrades include EUQ settings.)
  2. For non-cluster removal, you can skip this step.
    If you are removing SMEX from Microsoft cluster servers:
    • Delete ScanMail resources from the Cluster Administrator console.
    • Delete the following SMEX resource type on each node:
      • HKLM\Cluster\ResourceTypes\clusRDLLCCR
    If you are removing SMEX from VERITAS cluster servers, delete the ScanMail resources from the Cluster Explorer console:
    • EVS name-ScanMail_RegRep
    • EVS name-ScanMail_Master
    • EVS name-ScanMail_SystemWatcher
    • EVS name-ScanMail_RemoteConfig
    • EVS name-EUQ_Monitor (Only if End User Quarantine is installed.)
  3. Delete the related registry keys.
    Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
    Product registry keys:
    • HKLM\SOFTWARE\ Trend Micro\ScanMail for Exchange
    Service registry keys:
    • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_Master
    • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_RemoteConfig
    • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_SystemWatcher
    • HKLM\SYSTEM\CurrentControlSet\Services\RIFRemoteInstallAgent
    • HKLM\SYSTEM\CurrentControlSet\Services\EUQ_Monitor (This key only exists if EUQ is installed.)
    • HKLM\SYSTEM\CurrentControlSet\Services\EUQ_Migrator (This key only exists if upgrades include EUQ settings.)
    Security risk scan registry key:
    • HKLM\SYSTEM\CurrentControlSet\Serices\MSExchangeIS\VirusScan
    The virus/malware scan registry key is for each mailbox store. There are three REG_DWORD items for each mailbox store:
    • VirusScanBackgroundScanning
    • VirusScanEnabled
    • VirusScanProactiveScanning
  4. Delete the Web Server Configurations.
    1. Launch the Internet Information Services (IIS) Manager console.
    2. Expand Web Sites and then right-click SMEX Web Site.
    3. Select Delete.
  5. If End User Quarantine (EUQ) is installed, delete End User Quarantine Accounts and Mailboxes.
    1. Launch Active Users and Computers.
    2. Remove the EUQ accounts and mailboxes for the Exchange Server.
  6. Delete ScanMail from the Start menu.
    For example: C:\Documents and Settings\All Users\Start Menu\Programs\Trend Micro ScanMail for Microsoft Exchange
  7. Delete all files and subfolders in the folder in the folder where ScanMail is installed.
    For example: C:\Program Files\Trend Micro\SMEX\
  8. Delete all files and subfolders in <Shared Directory>\SMEXtemp\. This is the shared directory that was specified during installation. The default is C$.

Rate this Solution
Did this article help you?

Please provide your comments to help us improve this solution.

  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.

Connect with us on