Manually_Uninstalling_the_Client
Perform manual uninstallation only if you encounter problems uninstalling the client from the Web console or after running the uninstallation program.
To perform manual uninstallation:
Log on to the client computer using an account with Administrator privileges.
Right-click the OfficeScan client icon on the system tray and select Unload OfficeScan. If prompted for a password, specify the unload password then click OK.
Disable the password on computers where the client will be unloaded. For details, see Client Privileges and Other Settings.
If the unload password was not specified, stop the following services from Microsoft Management Console:
OfficeScan NT Listener
OfficeScan NT Firewall
OfficeScanNT RealTime Scan
OfficeScan NT Proxy Service
Trend Micro Unauthorized Change Prevention Service (if the computer runs an x86 type platform)
Click Start > Programs, right-click Trend Micro OfficeScan Client, and click Delete.
Open Registry Editor (regedit.exe).
The next steps require you to delete registry keys. Making incorrect changes to the registry can cause serious system problems. Always make a backup copy before making any registry changes. For more information, refer to the Registry Editor Help.
Delete the following registry keys:
If there are no other Trend Micro products installed on the computer:
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro
For 64-bit computers: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432node\Trend Micro
If there are other Trend Micro products installed on the computer, delete the following keys only:
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\NSC
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\OfcWatchDog
For 64-bit computers:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432node\Trend Micro\OfcWatchDog
HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp
For 64-bit computers:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432node\Trend Micro\PC-cillinNTCorp
Delete the following registry keys/values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OfficeScanNT
OfficeScanNT Monitor (REG_SZ) under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete all instances of the following registry keys in the following locations:
Locations:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services
Keys:
NTRtScan
tmcfw
tmcomm
TmFilter
TmListen
tmpfw
TmPreFilter
TmProxy
tmtdi
VSApiNt
tmlwf (For Windows Vista/2008 computers)
tmwfp (For Windows Vista/2008 computers)
tmactmon
TMBMServer
tmevtmgr
Close Registry Editor.
Click Start > Settings > Control Panel and double-click System.
Click the Hardware tab and then click Device Manager.
Click View > Show hidden devices.
Expand Non-Plug and Play Drivers and then uninstall the following devices:
tmcomm
tmactmon
tmevtmgr
Trend Micro Filter
Trend Micro PreFilter
Trend Micro TDI Driver
Trend Micro VSAPI NT
Trend Micro Unauthorized Change Prevention Service
Trend Micro WFP Callout Driver (For Windows Vista/2008 computers)
Uninstall the Common Firewall Driver.
Right-click My Network Places and click Properties.
Right-click Local Area Connection and click Properties.
On the General tab, select Trend Micro Common Firewall Driver and click Uninstall.
On Windows Vista computers, do the following:
Right-click Network and click Properties.
Click Manage network connections.
Right-click Local Area Connection and click Properties.
On the Networking tab, select Trend Micro NDIS 6.0 Filter Driver and click Uninstall.
Restart the client computer.
If there are no other Trend Micro products installed on the computer, delete the Trend Micro installation folder (typically, C:\Program Files\Trend Micro). For 64-bit computers, the installation folder can be found under C:\Program Files (x86)\Trend Micro.
If there are other Trend Micro products installed, delete the following folders:
The BM folder under the Trend Micro installation folder (typically, C:\Program Files\Trend Micro\BM)
See also: