How to Manually Uninstall Trend Micro OfficeScan Corporate Edition Client

Trend Micro OfficeScan is normally deployed in corporate network environment to provide endpoint security. Administrators can remotely uninstall the Office Scan client, and user at the workstation can uninstall the client program using built-in uninstall mechanism too (i.e. Add and Remove Program in Control Panel). If for some reason, the Office Scan client cannot or unable to uninstall, or user doesn’t have the required password to remove the OfficeScan client, try the following workaround to manually uninstall and remove Trend Micro OfficeScan.

1. Go to Control Panel Services (services.msc), and stop the following services:
   • OfficeScanNT Listener
   • OfficeScanNT RealTimeScan
   • OfficeScanNT Personal Firewall (if enabled)
2. Run Registry Editor (regedit.exe).
3. Navigate to the following registry key hive:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

4. Delete the following keys (if available):
   • Ntrtscan
   • Tmlisten
   • TmFilter
   • VSApiNt
   • TMPreFilter
   • TM_CFW
   • OfcPfwSvc
5. Navigate to the following registry hive:

   HKEY_LOCAL_MACHINE \SOFTWARE\TrendMicro

   or

   HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node\TrendMicro (in 64-bit Windows operating system)

6. Delete the following keys (if available):
   • OfcWatchDog
   • Pc-cillinNTCorp or OfficeScanCorp (depending on the client)
   • RemoteAgent
   • PC-cillin
   • CFW
7. Browse to the following registry key hive:

   HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft\Windows\CurrentVersion\Run

8. Delete the OfficeScanNT Monitor key.
9. Navigate to the following registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

10. Delete the OfficeScanNT key.
11. Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
12. Restart the computer.
13. Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.

Above steps work for OfficeScan 7.x client in Windows 2003/XP/2000/NT/Vista/2008 machine. For Trend Micro OfficeScan Corporate Edition (OSCE) – 5.58, OfficeScan Corporate Edition (OSCE) – 6.5, Client / Server / Messaging Suite for SMB – 2.0, follow these manual uninstallation steps instead.

1. Delete the Trend Micro OfficeScan Client program shortcut in Start Menu, by right click on it and then choose Delete.
2. Delete the installed files located in the OfficeScan folder under the \Program Files\Trend Micro\OfficeScan Client directory.
3. Open the Registry Editor (regedit).
4. Navigate to the following registry key:

   HKEY_LOCAL_MACHINE\Software\TrendMicro

5. Delete the following keys:
   • OfcWatchDog
   • PC-cillin
   • PC-cillinNTCorp
6. Also delete the following registry hives:
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OfficeScanNT Monitor
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OfficeScanNT
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ntrtscan
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmfilter
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmlisten
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TmPreFilter (for Win2003)
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSApiNt
7. Right click on My Computer, click Manage and then select Device Manager.
8. Enable the Show Hidden Devices option.
9. Remove the following hidden devices in Non-Plug and Play Drivers tree pertaining to OfficeScan (right-click and select Uninstall):
   • Trend Micro VSAPI NT
   • Trend Micro FILTER
   • Common Firewall Driver
   • NTRTSCAN (if available)
   • TMLISTEN (if available)
10. Restart the OfficeScan client machine.

Related Articles

• Remove or Reset Trend Micro OfficeScan Uninstall Password to Default
• How to Uninstall and Remove Trend Micro Internet Security Pro and (PC-Cillin) Internet Security 2005/2006/2007/2008 Manually
• Remove and Uninstall APC Powerchute Business Edition (Agent, Server and Console) Manually
• How to Manually Uninstall Microsoft Office 2007 System Suite
• Hack to Remove/Uninstall Symantec Norton Antivirus (SAV) Client without Password
• Workaround to Manually Uninstall, Remove or Delete Firefox Addon With Add-Ons Uninstall Button Disabled
• Official Ways to Disable or Manually Uninstall the Microsoft Windows Genuine Advantage Notifications from Microsoft
• Manually Uninstall and Delete Spb Wallet Toolbar from Firefox
• Free Trend Micro Internet Security 2008 (TIS 16) Registration Serial Number Valid for 3 Years
• Trend Micro PC-cillin Internet Security 2007 Beta for Windows Vista Free Download

This entry was posted on Friday, July 18th, 2008 at 2:45 am and is filed under Tips & Tricks. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.