How to Remove Trend Micro OfficeScan Client?

Topic

New Reply

I am trying to rehab an old Pentium III PC running Win XP Pro SP2. At one time, it apparently had Trend Micro’s OfficeScan Client installed on it. I am trying to get rid of this software so I can run another antimalware solution. I mainly know OS is installed because of its (red) icon in the notification area. I am unable to launch it’s user interface. When I look in Add/Remove Programs, it is not listed. I went to the Trend support site and it suggested a utility called Diagnostic Toolkit. I downloaded that and ran it. It gave an Uninstall option, which ran without errors. However, that didn’t get rid of the icon. I sent an email to Trend Micro, but have not received a reply. I also ran ccCleaner, but it did not list OfficeScan in its list of installed programs.

Does anyone know how to remove this sticky application? I would like to not reinstall XP, if possible. I am willing to do registry edits, but am a novice at it.

Thanks in advance.

Dave

Who is John Galt?

Microsoft Surface Pro 3 with Windows 10, MS Office. Samsung Galaxy S9+ with Android 10.

Reply | Quote

Replies

Dave, look in C: Program files.

Reply | Quote

The cheapest & cleanest way to uninstall any complex program is to do it manually;
1 Disable all of it’s running processes with Task Manager or Process Explorer.
2 Uninstall the app with it’s own uninstaller or the control panel’s. Alow the computer to boot if it requests to do so.
3 Run a thorough cleanup with a program like CCleaner and use it’s registry mode as well.
4 Search and delete it’s root folder from the programs section and any other hidden locations.
5 search the registry with regedit for any reference to the app in question and delete all applicable entries.

recycled advice

How to Manually Uninstall Trend Micro OfficeScan Corporate Edition Client

Trend Micro OfficeScan is normally deployed in corporate network environment to provide endpoint security. Administrators can remotely uninstall the Office Scan client, and user at the workstation can uninstall the client program using built-in uninstall mechanism too (i.e. Add and Remove Program in Control Panel). If for some reason, the Office Scan client cannot or unable to uninstall, or user doesn’t have the required password to remove the OfficeScan client, try the following workaround to manually uninstall and remove Trend Micro OfficeScan.

1.Go to Control Panel Services (services.msc), and stop the following services:
◦OfficeScanNT Listener
◦OfficeScanNT RealTimeScan
◦OfficeScanNT Personal Firewall (if enabled)
2.Run Registry Editor (regedit.exe).
3.Navigate to the following registry key hive:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices

4.Delete the following keys (if available):
◦Ntrtscan
◦Tmlisten
◦TmFilter
◦VSApiNt
◦TMPreFilter
◦TM_CFW
◦OfcPfwSvc
5.Navigate to the following registry hive:
HKEY_LOCAL_MACHINE SOFTWARETrendMicro

or

HKEY_LOCAL_MACHINE SOFTWARE Wow6432NodeTrendMicro (in 64-bit Windows operating system)

6.Delete the following keys (if available):
◦OfcWatchDog
◦Pc-cillinNTCorp or OfficeScanCorp (depending on the client)
◦RemoteAgent
◦PC-cillin
◦CFW
7.Browse to the following registry key hive:
HKEY_LOCAL_MACHINE SOFTWARE MicrosoftWindowsCurrentVersionRun

8.Delete the OfficeScanNT Monitor key.
9.Navigate to the following registry key:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall

10.Delete the OfficeScanNT key.
11.Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
12.Restart the computer.
13.Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.
Above steps work for OfficeScan 7.x client in Windows 2003/XP/2000/NT/Vista/2008 machine. For Trend Micro OfficeScan Corporate Edition (OSCE) – 5.58, OfficeScan Corporate Edition (OSCE) – 6.5, Client / Server / Messaging Suite for SMB – 2.0, follow these manual uninstallation steps instead.

1.Delete the Trend Micro OfficeScan Client program shortcut in Start Menu, by right click on it and then choose Delete.
2.Delete the installed files located in the OfficeScan folder under the Program FilesTrend MicroOfficeScan Client directory.
3.Open the Registry Editor (regedit).
4.Navigate to the following registry key:
HKEY_LOCAL_MACHINESoftwareTrendMicro

5.Delete the following keys:
◦OfcWatchDog
◦PC-cillin
◦PC-cillinNTCorp
6.Also delete the following registry hives:
◦HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOfficeScanNT Monitor
◦HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallOfficeScanNT
◦HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesntrtscan
◦HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicestmfilter
◦HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicestmlisten
◦HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTmPreFilter (for Win2003)
◦HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesVSApiNt
7.Right click on My Computer, click Manage and then select Device Manager.
8.Enable the Show Hidden Devices option.
9.Remove the following hidden devices in Non-Plug and Play Drivers tree pertaining to OfficeScan (right-click and select Uninstall):
◦Trend Micro VSAPI NT
◦Trend Micro FILTER
◦Common Firewall Driver
◦NTRTSCAN (if available)
◦TMLISTEN (if available)
10.Restart the OfficeScan client machine.

The above should be a tad more complete.

Reply | Quote

After reading this thread, I looked back at recent threads, just the first page in Security and Backups. Security Suites and associated problems were mentioned no less than 7 times on this page in the forum alone. I believe this points out a trend in Security Suites whereby the developers of these suites attempt to make them all encompassing to a point that they drastically affect performance in many cases. These same developers seem to spend almost no time making the uninstall routines as all encompassing as the app itself. I believe those of us that do worry about performance and attempt to tweak better performance from our PCes are moving away from these suites in large numbers in favor of the more targeted apps that seem to just do their intended job without bogging down our systems and creating other problems for us, like having to jump through the hoops Clint has just described to get rid of them. The last time I used one of these suites (Several years ago now) even after using their supposed removal tool, I had to search out and dispose of many of the leftover items that continued to cause problems. These same developers seem to be continually trying to make our lives more complex, when many of us just want to simplify our lives.

I can still remember the time when Peter Norton developed his AV product. It was simple and did a good job. Then Symantec bought out Peter and voila, the suite was born. Thank heaven that some developers are still looking at and developing the simple apps that just do their intended jobs without getting in our way.

Sorry for the long, somewhat off topic rant.

Reply | Quote

These same developers seem to spend almost no time making the uninstall routines as all encompassing as the app itself.

OfficeScan is a centrally managed corporate IT product. To uninstall it from the workstation, you should only have to log into the central console and delete the PC, assuming the PC still is on the network. The fact that the software protects itself from uninstallation through other means (without the central administration password) is part of the design of the product.

Reply | Quote