• Horn Player – Computer Dude – Gig Pig …
  • Home
  • About
  • Blog
  • Services
  • Contact
  • Webmail
  • Terms

Robert A. Owen - Musician - Network Engineer - Support Master

Music, Technology, Rants and Funnies - Randomness at its best!

  • Blog
  • Internet
    • IIS 6
    • IIS 7.5
    • Javascript
    • Web Design
      • WordPress
      • Coldfusion
  • Support
    • MicroSoft
      • Powershell
      • Surface
      • Windows10
      • Zune
    • PC-Care
    • Software
    • Virus
      • Email Scam
    • Vista Quest
    • Windows 7
  • Pictures
    • Instagram
  • Music
  • Friday Funnies
  • General
    • CoWorking
    • Gadgets
    • Politico
    • Random – TidBit
    • Rant
    • Review
    • Site of the Week
    • Useless
    • Xbox
      • Games
You are here: Home / Support / Software / Uninstall Trend Micro Officescan without a Password

Uninstall Trend Micro Officescan without a Password

August 18, 2009 By Robert Owen 21 Comments

Ran into a slight problem today.  I had to add a couple of older computers to a  new Domain.  Pretty easy to do normally but these workstations had a version of Trend Micro’s Officescan from their previous domain that needed to be removed so that the new version could be installed.

I couldn’t just uninstall the client (which would be the best solution) as that requires a password and no one in the office could remember the old password.  (As a side note, when you install network versions of antivirus programs, make notes of the install details and file them away.  It will help you out in the future.)  Doing a bit of “Bing-ing”  ( 😆 , yes I used Bing ) I found this information on how to change the password from Computing.Net:

To remove / reset the uninstall password for Trend Micro OfficeScan

Edit Ofcscan.ini file. (Do a search.)

On Windows.95/98/XP machines it is usually in C:\Windows\Ofcscan.ini

On Windows.NT/2K machines it is usually in C:\WINNT\Ofcscan.ini

Open the Ofcscan.ini file using notepad search for the [INI_CLIENT_SECTION]

Find the line reading Uninstall_Pwd= and type a # at the beginning of the line to comment it out.

Insert a new line saying Uninstall_Pwd=70

Save the Ofcscan.ini file and retry the uninstall. When it prompts you for a password, enter a ‘1’.

Sadly though, this method did not work for me as there was no Ofcscan.ini file to be found anywhere on these workstations.  Therefore I was forced to do some manual removal of the client.  This took a little digging into the Registry.  Here are the steps I went through that worked for me:

First, you need to stop all the Officescan Services. To do that

  1. Go to Control Panel —> Administrative Tools —-> Services — and stop these services:
    • OfficeScanNT Listener
    • OfficeScanNT RealTimeScan
    • OfficeScanNT Personal Firewall (this one may not be enabled – don’t worry if you don’t see it)
  2. Run Registry Editor. Click Start —> Run —> then type ‘regedit.exe’
  3. Find this registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
  4. Delete these keys:
    • Ntrtscan
    • Tmlisten
    • TmFilter
    • VSApiNt
    • TMPreFilter
    • TM_CFW
    • OfcPfwSvc
  5. Now find this Registry key:
    HKEY_LOCAL_MACHINE \SOFTWARE\TrendMicro
  6. Delete the following keys:
    • OfcWatchDog
    • Pc-cillinNTCorp
    • RemoteAgent
    • PC-cillin
  7. Next Find this registry key:
    HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft\Windows\CurrentVersion\Run
  8. Delete the OfficeScanNT Monitor key.
  9. Now find the following registry key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
  10. Delete the OfficeScanNT key.
  11. Delete the OfficeScan program group (Trend Micro OfficeScan Client) from the Windows Start menu.
  12. Restart your computer.
  13. Delete the directories that contain the OfficeScan Client program files, normally located inside Program Files folder.

The above steps worked for me on a version 6 client of the Trend Micro Officescan client. If you are trying to remove an early version of the client, these Registry keys and services may not be the same.  Please use the above instructions carefully and at your own risk.  Also, remember anytime you intend to edit the Registry make a backup BEFORE you started editing and/or deleting keys.

© 2009, Robert Owen. All rights reserved.

Related Posts Plugin for WordPress, Blogger...

Filed Under: Software, Support, Virus Tagged With: Administrative Tools, Antivirus Programs, Best Solution, How To Change The Password, Ing, Listener, Micro Office, Network Versions, Notepad, Office Password, Office Scan, Older Computers, Personal Firewall, Pwd, Registry Editor, Remember Password, Remove Password, Reset Password, Trend Micro, Trend Micro Officescan, Trend Officescan, Type Regedit, Uninstall, Winnt, Workstations

Comments

  1. DANIEL says

    October 27, 2009 at 5:29 pm

    THANK YOU VERY MUCH FOR ALL THIS INFO. IT REALLY WORKED FOR ME.

    Reply
  2. Allan says

    December 30, 2009 at 6:53 am

    Thank you very much, worked very well. Top quality information!

    Reply
    • Robert Owen says

      December 30, 2009 at 12:00 pm

      Glad it helped you! 🙂

      Reply
  3. azilan aria says

    June 27, 2011 at 12:42 am

    Wow, awesome method, Worked great!…after many time attempts….thanks a lot… : 0 ; )

    Reply
  4. Alan says

    September 6, 2011 at 9:58 pm

    Thanks

    Reply
    • Robert Owen says

      September 9, 2011 at 7:29 am

      No problem! Glad it helped.

      Reply
  5. Abhijit Das says

    January 17, 2012 at 3:22 am

    thaks it worked for me ….

    Reply
  6. justjoe says

    March 21, 2012 at 3:02 pm

    wow, this is interesting. but isn’t dangerous if you make registry changes ?

    Reply
    • Robert Owen says

      March 21, 2012 at 5:42 pm

      It is absolutely dangerous to make changes to the registry. That is why you should always make a backup first! 🙂

      Reply
  7. Satya says

    June 19, 2012 at 5:23 am

    nothing of the above is working on my system

    Reply
    • Robert Owen says

      July 24, 2012 at 7:32 pm

      What version are you trying to remove?

      Reply
  8. Kiki Rizki says

    July 26, 2012 at 9:14 pm

    I can’t use the ofcscan.ini path to work, I don’t know anything about the Registry Editor and what to do.

    Can you make a video tutorial of this? I really wanted to delete Trend Micro Officescan but I don’t know the password

    Please reply ASAP! Thank you 🙂

    Reply
  9. Nag says

    August 28, 2012 at 2:16 pm

    it didn’t worked for me.. 🙁
    Tried editing Ofcscan.ini file and wen i tried to uninstall it was not accepting 1 as password.
    and i’m unable to stop the services as all the options to stop in services.msc for officescan files are grayed out.

    office scan version: 10.6.1062

    I didn’t try editing registry…

    Reply
  10. evan says

    February 7, 2013 at 8:51 pm

    how od you do it if you are not administrator?

    Reply
    • Robert Owen says

      February 9, 2013 at 1:00 pm

      I’m not sure you can without having Administrator access..

      Reply
  11. Vishal says

    February 8, 2013 at 3:45 pm

    You are Great i got finally rid of Tren Micro OS…. THnks a lot

    Reply
  12. Bhadresh Gajjar says

    February 14, 2013 at 12:58 pm

    Thanks a Lott Dude………. It Works…… but still showing tmdshell.dll cannot remove

    Reply
    • Robert Owen says

      February 15, 2013 at 6:57 pm

      Try this, I found it at Majorgeeks

      You can just close explorer and then delete it. That’s what I do.

      Before you close explorer open a command prompt (windows+r->”cmd”). Then simple hit ctrl-alt-delete and press end task for explorer.exe. Now go to the still opened command prompt. And type “del tmdshell.dll”. Once you’re done just type “explorer” and press return, and it will reload explorer and bring back all the gui stuff.

      Of course before typing “del tmdshell.dll” make sure you’re in the correct DIR.

      Reply
  13. Eric says

    February 21, 2013 at 1:45 pm

    Thanks for the info.

    My ini was under program files

    I searched for section and found password fields labeled !crypt! and changed to 70

    I changed uninstall entries from 0 to 1 and then the uninstall program in add/remove programs worked.

    Reply
  14. Enterprise Support says

    July 16, 2013 at 1:34 pm

    Yes! Finally someone writes about Trend Micro.

    Reply
  15. ain says

    July 30, 2015 at 3:38 am

    thanks a lot, its working! but however, i still cant delete/uninstall the folder in the program file. Any suggestion ?

    Reply

Leave a Reply to Robert Owen Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Robert Owen A Horn Player turned salesman, turned Computer Consultant & Horn Player, Turn Network Engineer & Horn Player.... Well, How about a Horn player who does a lot of other stuff? More about me. FacebookInstagramLinkedInTwitter

To Stay up-to-date on all of my crazy Ramblings, enter your e-mail address below.

You'll be amazed!

Recent Posts…

  • Instagram Photos
  • Time for more Pictures
  • Windows 10 – Forget Wireless Network
  • Powershell to check and start a service
  • Its Amazing – Shia LaBeouf

Recent Comments

  • David Gray on Create a Shortcut to open in your Alternate BrowserTwelve years on, this tip remains useful. Though I…
  • Sue K on Use the Snipping Tool to Capture MenusThanks you so much! I could never figure out how t…
  • aa on Increase IIS File Upload LimitsSuperb Robert..after wasting 2 days..this is perfe…
  • León on Windows 7 error 86Funciono para Windows 7 , también descubrí que la…
  • Nicole Larkin on Use the Snipping Tool to Capture MenusNine years later and your post is still helpful. T…

[footer_backtotop]

Content Copyright © 2022 OWEN CONSULTING · All Rights Reserved · Log in