To manually uninstall Serverprotect, perform the applicable scenario:
- Stop all the SPNT services (IS, NS and TMI).
- Delete the registry keys as shown below.
Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
For 32-bit machines
- HKLM\Software\TrendMicro\ServerProtect
- HKLM\Software\TrendMicro\Debuglog
- HKLM\ Software\TrendMicro\OPPTrustPort
- HKLM\Software\TrendMicro\TMI (if TMI service is installed)
- HKLM\Software\TrendMicro\TrendMicro Control Manager Agent (if CMAgent is installed)
- HKLM\ Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect for NT
- HKLM\ Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect IS
- HKLM\ Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect Management Console
- HKLM\ Software\Microsoft\Windows\CurrentVersion\Uninstall\TMI
- HKLM\System\CurrentControlSet\Services\EarthAgent
- HKLM\System\CurrentControlSet\Services\SpntSvc
- HKLM\System\CurrentControlSet\Services\TrendMicro Infrastructure (if TMI service is installed)
- HKLM\System\CurrentControlSet\Services\TmXPFlt
- HKLM\System\CurrentControlSet\Services\TmPreflt
- HKLM\System\CurrentControlSet\Services\VsapiNT
For 64-bit machines
Normal Server Registry Keys
- HKLM\Software\TrendMicro\ServerProtect
- HKLM\Software\TrendMicro\Debuglog
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect for NT
- HKLM\System\CurrentControlSet\Services\SpntSvc
- HKLM\System\CurrentControlSet\Services\TmXPFlt
- HKLM\System\CurrentControlSet\Services\TmPreflt
- HKLM\System\CurrentControlSet\Services\VsapiNT
Information Server/Management Registry Keys
- HKLM\ Software\Wow6432Node\TrendMicro\ServerProtect
- HKLM\ Software\Wow6432Node\TrendMicro\Debuglog
- HKLM\ Software\Wow6432Node\TrendMicro\OPPTrustPort
- HKLM\SW\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect IS
- HKLM\SW\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect Management Console
- HKLM\System\CurrentControlSet\Services\EarthAgent
CM Agent part Registry Keys
- HKLM\ Software\Wow6432Node\TrendMicro\TMI
- HKLM\ Software\Wow6432Node\TrendMicro\TrendMicro Control Manager Agent
- HKLM\SW\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\TMI
- HKLM\System\CurrentControlSet\Services\TrendMicro Infrastructure (if TMI service is installed)
- Delete the following program files:
For 32-bit machines
- C:\Program Files\Trend\SProtect
- C:\Program Files\Trend\Common
For 64-bit machines
- C:\Program Files\Trend\SProtect
- C:\Program Files\Trend\Common
- C:\Program Files (x86)\Trend\Common
- Uninstall the following components under Device Manager > Show hidden devices > Non - Plug and Play drivers:
- Trend ServerProtect filter
- Trend ServerProtect Prefilter
- Trend ServerProtect Scan Engine
- Reboot the server.
- Stop all the SPNT services (IS or NS or TMI).
- Delete the registry keys respectively as shown below.
Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
IS/MC only
For 32-bit machines
- HKLM\Software\TrendMicro\ServerProtect
- HKLM\Software\TrendMicro\Debuglog
- HKLM\ Software\TrendMicro\OPPTrustPort
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect IS
- HKLM\ Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect Management Console
- HKLM\System\CurrentControlSet\Services\EarthAgent
- HKLM\System\CurrentControlSet\Services\TmFilterOn
For 64-bit machines
- HKLM\ Software\Wow6432Node\TrendMicro\ServerProtect
- HKLM\ Software\Wow6432Node\TrendMicro\Debuglog
- HKLM\ Software\Wow6432Node\TrendMicro\OPPTrustPort
- HKLM\SW\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect IS
- HKLM\SW\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect Management Console
- HKLM\System\CurrentControlSet\Services\EarthAgent
- HKLM\System\CurrentControlSet\Services\TmFilterOn
CMAgent only
For 32-bit machines
- HKLM\Software\TrendMicro\TMI (if TMI service is installed)
- HKLM\Software\TrendMicro\TrendMicro Control Manager Agent (if CMAgent is installed)
- HKLM\ Software\Microsoft\Windows\CurrentVersion\Uninstall\TMI
- HKLM\System\CurrentControlSet\Services\TrendMicro Infrastructure (if TMI service is installed)
- HKLM\System\CurrentControlSet\Services\TmFilterOn
For 64-bit machines
- HKLM\ Software\Wow6432Node\TrendMicro\TMI
- HKLM\ Software\Wow6432Node\TrendMicro\TrendMicro Control Manager Agent
- HKLM\SW\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\TMI
- HKLM\System\CurrentControlSet\Services\TrendMicro Infrastructure (if TMI service is installed)
- HKLM\System\CurrentControlSet\Services\TmFilterOn
NS only
For 32-bit and 64-bit machines
- HKLM\Software\TrendMicro\ServerProtect
- HKLM\Software\TrendMicro\Debuglog
- HKLM\ Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect for NT
- HKLM\System\CurrentControlSet\Services\SpntSvc
- HKLM\System\CurrentControlSet\Services\TmXPFlt
- HKLM\System\CurrentControlSet\Services\TmPreflt
- HKLM\System\CurrentControlSet\Services\VsapiNT
- HKLM\System\CurrentControlSet\Services\TmFilterOn
- Delete the Serverprotect program files.
For IS/MC and CM Agent, refer to Scenario 1, Step 3 for the steps.
For NS, please note the differences between x32 and x64 machines. The file/directory path might be different.
For 32-bit machines
- C:\Program Files\Trend\SProtect
For 64-bit machines
- C:\Program Files\Trend\SProtect\x64
- Uninstall the following components under Device Manager > Show hidden devices > Non - Plug and Play drivers:
- Trend ServerProtect filter
- Trend ServerProtect Prefilter
- Trend ServerProtect Scan Engine
- Reboot the machine.
For IS/MC and CM Agent uninstall, reboot is optional.
For NS uninstall, reboot is mandatory.