How To Guide
Jul 18, 2008
My Digital Life Editorial Team
19 Comments
Delicious Delicious

How to Manually Uninstall Trend Micro OfficeScan Corporate Edition Client

Trend Micro OfficeScan is normally deployed in corporate network environment to provide endpoint security. Administrators can remotely uninstall the Office Scan client, and user at the workstation can uninstall the client program using built-in uninstall mechanism too (i.e. Add and Remove Program in Control Panel). If for some reason, the Office Scan client cannot or unable to uninstall, or user doesn’t have the required password to remove the OfficeScan client, try the following workaround to manually uninstall and remove Trend Micro OfficeScan.

  1. Go to Control Panel Services (services.msc), and stop the following services:
    • OfficeScanNT Listener
    • OfficeScanNT RealTimeScan
    • OfficeScanNT Personal Firewall (if enabled)
  2. Run Registry Editor (regedit.exe).
  3. Navigate to the following registry key hive:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

  4. Delete the following keys (if available):
    • Ntrtscan
    • Tmlisten
    • TmFilter
    • VSApiNt
    • TMPreFilter
    • TM_CFW
    • OfcPfwSvc
  5. Navigate to the following registry hive:

    HKEY_LOCAL_MACHINE \SOFTWARE\TrendMicro

    or

    HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node\TrendMicro (in 64-bit Windows operating system)

  6. Delete the following keys (if available):
    • OfcWatchDog
    • Pc-cillinNTCorp or OfficeScanCorp (depending on the client)
    • RemoteAgent
    • PC-cillin
    • CFW
  7. Browse to the following registry key hive:

    HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft\Windows\CurrentVersion\Run

  8. Delete the OfficeScanNT Monitor key.
  9. Navigate to the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

  10. Delete the OfficeScanNT key.
  11. Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
  12. Restart the computer.
  13. Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.

Above steps work for OfficeScan 7.x client in Windows 2003/XP/2000/NT/Vista/2008 machine. For Trend Micro OfficeScan Corporate Edition (OSCE) – 5.58, OfficeScan Corporate Edition (OSCE) – 6.5, Client / Server / Messaging Suite for SMB – 2.0, follow these manual uninstallation steps instead.

  1. Delete the Trend Micro OfficeScan Client program shortcut in Start Menu, by right click on it and then choose Delete.
  2. Delete the installed files located in the OfficeScan folder under the \Program Files\Trend Micro\OfficeScan Client directory.
  3. Open the Registry Editor (regedit).
  4. Navigate to the following registry key:

    HKEY_LOCAL_MACHINE\Software\TrendMicro

  5. Delete the following keys:
    • OfcWatchDog
    • PC-cillin
    • PC-cillinNTCorp
  6. Also delete the following registry hives:
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OfficeScanNT Monitor
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OfficeScanNT
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ntrtscan
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmfilter
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmlisten
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TmPreFilter (for Win2003)
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSApiNt
  7. Right click on My Computer, click Manage and then select Device Manager.
  8. Enable the Show Hidden Devices option.
  9. Remove the following hidden devices in Non-Plug and Play Drivers tree pertaining to OfficeScan (right-click and select Uninstall):
    • Trend Micro VSAPI NT
    • Trend Micro FILTER
    • Common Firewall Driver
    • NTRTSCAN (if available)
    • TMLISTEN (if available)
  10. Restart the OfficeScan client machine.

Related posts:

  1. Remove and Uninstall APC Powerchute Business Edition (Agent, Server and Console) Manually
  2. How to Uninstall and Remove Trend Micro Internet Security Pro and (PC-Cillin) Internet Security 2005/2006/2007/2008 Manually
  3. Manual and Clean Uninstall Oracle for Windows
  4. Hack to Remove/Uninstall Symantec Norton Antivirus (SAV) Client without Password
  5. Workaround to Manually Uninstall, Remove or Delete Firefox Addon With Add-Ons Uninstall Button Disabled

19 Comments

  • Alain QuarrĂ© February 4, 2012 at 8:00 am

    How to uninstall Officescan client without knowing password

    (for x64 system)
    Goto registry @ key
    HKLM\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.

    Set 1 to these two values:
    “Allow Uninstall” AND “NoPwdProtect”

    Run with administrative right:
    “C:\Program Files (x86)\Trend Micro\OfficeScan Client\NTRmv.exe”

    That’s all

    Alain

    Reply
    • Sergio May 22, 2012 at 3:42 am

      For version 10.5.1997 works perfect! Thank you very much.

      Reply
  • Damian January 15, 2012 at 6:18 am

    Works beautifully thank you very much!

    Reply
  • Leo November 18, 2011 at 10:12 am

    Thanks!

    Reply
  • Hassan October 5, 2011 at 2:32 am

    thank you very much for the help. this helped me solving my problem.

    Reply
  • geek February 21, 2011 at 3:21 am

    THANKS SO MUCH' DAWG..

    Reply
  • Ken December 29, 2010 at 12:02 pm

    Thank you so much. It works perfectly. I am happy now.

    Reply
  • Sam September 8, 2010 at 1:14 pm

    Bravo.. Excellent work .. It helps to finally remove Trend .. Thanks alot

    Reply
  • cristian July 8, 2010 at 10:33 am

    My question is this how I can re-raise my trendmicro 10.0 console because I had a problem with IIS, now pick it up but I need to know if there is a tool to grab it without installing everything again whether the server and cleint

    Thanks

    Reply
  • Thanks john.doe July 6, 2010 at 8:12 am

    John Doe's solution was easy and worked perfectly!

    Reply
  • AJ Kruger June 22, 2010 at 2:41 pm

    Thanks John.Doe, your solution worked wonders! :) The .ini file hack hadn't worked for me but your suggested solution allowed me to uninstall OfficeScan without having to input a password.

    Reply
  • joe April 22, 2010 at 5:03 pm

    all this is useless – it wont' even give me the option to stop the services listed above…

    Reply
  • john.doe October 7, 2009 at 1:28 pm

    For me this solution worked better:

    1. Set the "HKLMSoftwareTrendMicroPC-cillinNTCorpMiscAllow Uninstall" value to "1"
    2. Execute "C:Program FilesTrend MicroOfficeScan Client
    trmv.exe"

    Reply
  • Bjorn Persson July 31, 2009 at 4:35 am

    Thank allot it work perfect =D

    Reply
  • Bill C June 6, 2009 at 8:21 am

    Bravo! Thank you for this.. it saved me hours!

    Peace, Bill

    Reply
  • Niall Syms March 21, 2009 at 6:22 am

    How to reset Trend Micro OfficeScan password to 1.

    Edit Ofcscan.ini file.

    On Windows.95/98 machines it is usually in C:WindowsOfcscan.ini

    On Windows.NT/2K machines it is usually in C:WINNTOfcscan.ini

    On Windows XP and Vista it is usually in C:Program FilesTrend MicroOfficeScan Client Ofcscan.ini

    Open the Ofcscan.ini file using notepad search for the [INI_CLIENT_SECTION]

    Find the line reading Uninstall_Pwd= and type a # at the beginning of the line to comment it out.

    Insert a new line saying Uninstall_Pwd=70

    Save the Ofcscan.ini file and retry the uninstall. When it prompts you for a password, enter a '1'.

    Reply
  • Nerd December 10, 2008 at 10:15 am

    How to remove password on uninstaller:

    To remove / reset the uninstall password for Trend Micro OfficeScan

    Edit Ofcscan.ini file. (Do a search.)

    On Windows.95/98/XP machines it is usually in C:WindowsOfcscan.ini

    On Windows.NT/2K machines it is usually in C:WINNTOfcscan.ini

    Open the Ofcscan.ini file using notepad search for the [INI_CLIENT_SECTION]

    Find the line reading Uninstall_Pwd= and type a # at the beginning of the line to comment it out.

    Insert a new line saying Uninstall_Pwd=70

    Save the Ofcscan.ini file and retry the uninstall. When it prompts you for a password, enter a '1'.

    Good Luck

    Reply
    • Lolo May 25, 2011 at 6:40 am

      How can i stop notification emails of virus from a client as we are using OfficeScan Corporate Edition Client

      this is needed only for one pc ..

      please advice

      Reply
  • Remove or Reset Trend Micro OfficeScan Uninstall Password to Default » My Digital Life July 18, 2008 at 2:47 am

    [...] if above hack does not work, user can always manually uninstall Trend Micro OfficeScan client, bypassing and skipping all password [...]

    Reply

Leave a comment

Notify me of followup comments via e-mail. You can also subscribe without commenting.

Subscribe

Free email subscriptions
Get latest updates in email for free:

Translate This Page