http://www.mydigitallife.info/2008/07/18/how-to-manually-uninstall-trend-micro-officescan-corporate-edition-client/
Trend Micro does not recommend performing a manual uninstallation unless the automated uninstallation processes do not work. Uninstalling the OfficeScan Agent from the Web Console The OfficeScan Agent Uninstallation Program. Trend Micro is a popular anti-virus software that is quite good at preventing malicious viruses from infecting your PC, however if you wish to remove it, you’re going to need a password to do so. If you no longer have that password, fret not because there are several ways you can uninstall Trend Micro without it.
In the online help file and the online Knowledge Base at Trend Micro’s Web site. Trend Micro always seeks to improve its documentation. If you have questions, comments, or suggestions about this or any Trend Micro document, please contact us at docs@trendmicro.com. Please evaluate this documentation on the following site. Trend Micro OfficeScan is normally deployed in corporate network environment to provide endpoint security. Administrators can remotely uninstall the Office Scan client, and user at the workstation can uninstall the client program using built-in uninstall mechanism too (i.e. Add and Remove Program in Control Panel). If for some reason, the Office Scan client cannot or unable to uninstall,.
- Go to Control Panel Services (services.msc), and stop the following services:
- OfficeScanNT Listener
- OfficeScanNT RealTimeScan
- OfficeScanNT Personal Firewall (if enabled)
- Run Registry Editor (regedit.exe).
- Navigate to the following registry key hive:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices
- Delete the following keys (if available):
- Ntrtscan
- Tmlisten
- TmFilter
- VSApiNt
- TMPreFilter
- TM_CFW
- OfcPfwSvc
- Navigate to the following registry hive:
HKEY_LOCAL_MACHINE SOFTWARETrendMicro
or
HKEY_LOCAL_MACHINE SOFTWARE Wow6432NodeTrendMicro (in 64-bit Windows operating system)
- Delete the following keys (if available):
- OfcWatchDog
- Pc-cillinNTCorp or OfficeScanCorp (depending on the client)
- RemoteAgent
- PC-cillin
- CFW
- Browse to the following registry key hive:
HKEY_LOCAL_MACHINE SOFTWARE MicrosoftWindowsCurrentVersionRun
- Delete the OfficeScanNT Monitor key.
- Navigate to the following registry key:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall
- Delete the OfficeScanNT key.
- Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
- Restart the computer.
- Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.
Above steps work for OfficeScan 7.x client in Windows 2003/XP/2000/NT/Vista/2008 machine. For Trend Micro OfficeScan Corporate Edition (OSCE) – 5.58, OfficeScan Corporate Edition (OSCE) – 6.5, Client / Server / Messaging Suite for SMB – 2.0, follow these manual uninstallation steps instead.
- Delete the Trend Micro OfficeScan Client program shortcut in Start Menu, by right click on it and then choose Delete.
- Delete the installed files located in the OfficeScan folder under the Program FilesTrend MicroOfficeScan Client directory.
- Open the Registry Editor (regedit).
- Navigate to the following registry key:
HKEY_LOCAL_MACHINESoftwareTrendMicro
- Delete the following keys:
- OfcWatchDog
- PC-cillin
- PC-cillinNTCorp
- Also delete the following registry hives:
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOfficeScanNT Monitor
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallOfficeScanNT
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesntrtscan
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicestmfilter
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicestmlisten
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTmPreFilter (for Win2003)
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesVSApiNt
- Right click on My Computer, click Manage and then select Device Manager.
- Enable the Show Hidden Devices option.
- Remove the following hidden devices in Non-Plug and Play Drivers tree pertaining to OfficeScan (right-click and select Uninstall):
- Trend Micro VSAPI NT
- Trend Micro FILTER
- Common Firewall Driver
- NTRTSCAN (if available)
- TMLISTEN (if available)
- Restart the OfficeScan client machine.
Cannot Uninstall Trend Micro Officescan
- Go to Control Panel Services (services.msc), and stop the following services:
- OfficeScanNT Listener
- OfficeScanNT RealTimeScan
- OfficeScanNT Personal Firewall (if enabled)
- Run Registry Editor (regedit.exe).
- Navigate to the following registry key
hive:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices
- Delete the following keys (if available):
- Ntrtscan
- Tmlisten
- TmFilter
- VSApiNt
- TMPreFilter
- TM_CFW
- OfcPfwSvc
- Navigate to the following registry hive:
HKEY_LOCAL_MACHINE SOFTWARETrendMicro
or
HKEY_LOCAL_MACHINE SOFTWARE Wow6432NodeTrendMicro (in 64-bit Windows operating system)
- Delete the following keys (if available):
- OfcWatchDog
- Pc-cillinNTCorp or OfficeScanCorp (depending on the client)
- RemoteAgent
- PC-cillin
- CFW
- Browse to the following registry key hive:
HKEY_LOCAL_MACHINE SOFTWARE MicrosoftWindowsCurrentVersionRun
- Delete the OfficeScanNT Monitor key.
- Navigate to the following registry key:
Manually Uninstall Trend Micro Officescan 11
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall
- Delete the OfficeScanNT key.
- Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
- Restart the computer.
- Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.
Above steps work for OfficeScan 7.x client in Windows 2003/XP/2000/NT/Vista/2008 machine. For Trend Micro OfficeScan Corporate Edition (OSCE) – 5.58, OfficeScan Corporate Edition (OSCE) – 6.5, Client / Server / Messaging Suite for SMB – 2.0, follow these manual uninstallation steps instead.
- Delete the Trend Micro OfficeScan Client program shortcut in Start Menu, by right click on it and then choose Delete.
- Delete the installed files located in the OfficeScan folder under the Program FilesTrend MicroOfficeScan Client directory.
- Open the Registry Editor (regedit).
- Navigate to the following registry key:
HKEY_LOCAL_MACHINESoftwareTrendMicro
- Delete the following keys:
- OfcWatchDog
- PC-cillin
- PC-cillinNTCorp
- Also delete the following registry hives:
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOfficeScanNT Monitor
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallOfficeScanNT
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesntrtscan
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicestmfilter
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicestmlisten
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTmPreFilter (for Win2003)
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesVSApiNt
- Right click on My Computer
, click Manage and then select Device Manager.
- Enable the Show Hidden Devices option.
- Remove the following hidden devices in Non-Plug and Play Drivers tree pertaining to OfficeScan (right-click and select Uninstall):
- Trend Micro VSAPI NT
- Trend Micro FILTER
- Common Firewall Driver
- NTRTSCAN (if available)
- TMLISTEN (if available)
- Restart the OfficeScan client machine.
Source: http://www.mydigitallife.info/2008/07/18/how-to-manually-uninstall-trend-micro-officescan-corporate-edition-client/