About Agent Uninstallation

To uninstall Endpoint Application Control agents, Trend Micro recommends the following:

  • Use a Windows administrator account to uninstall.

  • After uninstalling, restart the agent endpoint to allow Setup to complete clean-up tasks.

  • Use any of the following recommended uninstallation method for the type of Setup used to deploy the agent:

    Installation Type

    Appropriate Uninstallation Methods

    OfficeScan

    See Installing Agents Using the OfficeScan Plug-In.

    Use the OfficeScan plug-in.

    For example, to remove Endpoint Application Control agents from selected endpoints, follow the steps below:

    1. Go to the OfficeScan console, click Plug-ins.

    2. From the Endpoint Application Control section, click Manage Program.

    3. Go to the Server Settings screen and configure the Agent Uninstallation Token settings.

    4. Click Get Token to obtain the uninstallation token from the specified Endpoint Application Control server.

    5. Click Save.
    6. Go to the Agent Management screen, click Tasks > Uninstall Agent

    Important:

    To uninstall agents deployed using the OfficeScan plug-in, make sure to do so only from the OfficeScan Plug-in console. If any other method is used, the OfficeScan console will not be updated and will continue to display the uninstalled agents as "installed".

    Windows

    See Installing Agents Using Windows.

    Use any of the following methods:

    • Windows

      For example, in Windows 7, log on as a Windows administrator and then go to Start > Control Panel > Programs. Then, select Trend Micro Endpoint Application Control in the list, click Uninstall, and then follow the steps in the Windows uninstallation wizard.

    • Use the command prompt.

      For example, use the command prompt with Windows administrator privileges to do the following:

      • To uninstall 32-bit agents, type MsiExec.exe /X{31B282D5-D840-446C-9F0C-38F699B17983}

      • To uninstall 64-bit agents, type MsiExec.exe /X{CA94574A-9591-4278-9269-0F5FB01FF8A4}

    • Logon script

      For example, to uninstall Endpoint Application Control using the appropriate Windows architecture, use the following script:

      :CheckAnyInstallExists

      REG QUERY "HKLM\SOFTWARE\TrendMicro\Endpoint Application Control Agent"

      IF %ERRORLEVEL% EQU 0 GOTO CheckOS

      GOTO END

      :CheckOS

      IF EXIST "%PROGRAMFILES(X86)%" (GOTO 64BIT) ELSE (GOTO 32BIT)

      :64BIT

      IF EXIST %programFiles%\Trend Micro\Endpoint Application Control Agent\ac_bin\AcAgentService.exe MsiExec.exe /X{CA94574A-9591-4278-9269-0F5FB01FF8A4}

      GOTO END

      :32BIT

      IF EXIST %programFiles%\Trend Micro\Endpoint Application Control Agent\ac_bin\AcAgentService.exe MsiExec.exe /X{31B282D5-D840-446C-9F0C-38F699B17983}

      GOTO END

      :END

    • Active Directory

      For example, do the following:

      1. Locate and right-click the Group Policy Object for the Endpoint Application Control agent and then select Edit.

        The Group Policy Management Editor screen appears.

      2. Do one of the following:

        • If your configuration is computer-based, expand Computer Configuration > Policies > Software Settings.

        • If your configuration is user-based, expand User Configuration > Policies > Software Settings.

      3. Click Software installation.

        Your installed Endpoint Application Control agents appear in the list.

      4. Select the agent or agents to remove, right-click one of the selected agents, and then select All Tasks > Remove....

        The Remove Software notification appears.

      5. Select Immediately uninstall and then click OK.

    • Third-party application deployment tool

      Follow the best practices for your third-party deployment tool to uninstall agents.

    Command prompt

    See Installing Agents Using the Command Prompt.

    Logon script

    See Installing Agents Using a Logon Script.

    Active Directory

    See Installing Agents Using Active Directory.

    Third-party application deployment tool

    See Installing Agents Using Deployment Tools.

About Agent Uninstall Cleanup

If uninstallation is interrupted or fails, you may need to manually remove items. After restarting the agent endpoint, confirm that the following items are removed:

Item Type

Item and Location

Directory

%ProgramFiles%\Trend Micro\Endpoint Application Control Agent

%APPDATA%\Trend Micro

File

%windir%\System32\drivers\AcDriver.sys

%windir%\System32\drivers\AcDriverHelper.sys

Registry

HKLM\SOFTWARE\TrendMicro\Endpoint Application Control Agent

HKLM\SYSTEM\CurrentControlSet\services\acagentservice

HKLM\SYSTEM\CurrentControlSet\services\AcDriver

HKLM\SYSTEM\CurrentControlSet\services\AcDriverHelper