Cyber memos for my personal knowledge.

2008-10-20

How to uninstall Trend Micro OfficeScan client w/o IT password


Sometimes I want to re-install Trend Micro OfficeScan client from my office PC.
But due to my IT dept.'s rule it requires a password to uninstall the client.

How can we do to "drive-around" it? ;-)

Basically, we can use a little bit trick to do so.

Use "services.msc" command to open the service list. And then find out all "OfficeScanNT*" services and STOP them. You can see the Trend Micro OfficeScan icon in the system tray will disappear.

Open your registry editor and find out HKEY_LOCAL_MACHINE\System\Current Control Set\Services, and look for following subkeys:
Ntrtscan
Tmfilter
Tmlisten
TmPreFilter
TmProxy
tmtdi
VSApiNt
TM_CFW (if you have this one)

Delete above subkeys (CAUTION! BE CAREFUL WITH THIS OPERATION!).

Find out the registry key HKEY_LOCAL_MACHINE\Software\TrendMicro, and look for following subkeys:
OfcWatchDog
NSC
Pc-cillinNTCorp
OfficeScanCorp (if you have this one)
RemoteAgent (if you have this one)

Delete above subkeys (CAUTION! BE CAREFUL WITH THIS OPERATION!).

Find out HKEY_LOCAL_MACHINE\Software\MicroSoft\WINDOWS\Current Version\Run, and look up the value: OfficScanNT Monitor,

Delete above value (CAUTION! BE CAREFUL WITH THIS OPERATION!).

Delete the entry in your "Start" -> "Programs" -> "Trend Micro OfficeScan xxx", and then issue a system reboot. After reboot delete C:\Program Files\Trend Micro\OfficeScan Client or C:\OfficeScanNT, Then also you can delete the file C:\tmuninst.ini if you have it.

Ok, now you are ready to re-install your virus scaning application ;-)

No comments: