Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Manually uninstalling the Messaging Security Agent (MSA) of Worry-Free Business Security (WFBS) 6.0/7.0

    • Updated:
    • 9 Apr 2020
    • Product/Version:
    • Worry-Free Business Security Standard/Advanced 7.0
    • Platform:
    • Windows 2000 Server
    • Windows 2003 Standard Server Edition
    • Windows 2008 Datacenter Server
    • Windows 2008 Enterprise Server
    • Windows 2008 Standard Server Edition
    • Windows Vista 32-bit
    • Windows XP Home

Learn how to manually uninstall the MSA of WFBS Advanced. You can perform manual uninstallation when:

  • Installation failed and you are unable to re-install the MSA.
  • MSA upgrade failed.
  • You cannot unisntall the MSA from Control Panel > Add/Remove Programs.
  • You want to make sure that all the MSA components are removed from the system.

On the computer where the MSA is installed, please do the following:

You may want to print this solution before continuing because it requires a restart of the computer.
  1. Stop the following services:
    • Trend Micro Messaging Security Agent EUQ Monitor
    • Trend Micro Messaging Security Agent Master Service
    • Trend Micro Messaging Security Agent Remote Configuration Server
    • Trend Micro Messaging Security Agent System Watcher
  2. Stop the SMEX Web site and then remove it from the IIS console or the Apache configuration file:
    WFBS 7.0 MSA does not use Apache Web server. Proceed to the next step if you are using this version.

    For IIS web server

    For Apache web server and other applications are also using it

        1. Under the directory where Apache is installed, go to the Config folder.
        2. Open the Apache configuration file http.conf with a text editor like Notepad.
        3. Remove the web site information of the MSA.
          • If the Apache server was installed through the MSA installation program, remove the following information:
            • "# SMEX SSL - Start" ~ "# SMEX SSL -- End"
            • "# SMEX Virtual Path -- Start" ~ "# SMEX Virtual Path -- End"
          • If the Apache server was not installed through the MSA installation program (e.g. installed by Security Server or other application/users), remove the following information:
            • "#SMEX Listen Port - Start" ~ "#SMEX Listen Port -End"
            • "# SMEX Virtual Path -- Start" ~ "# SMEX Virtual Path -- End"
    If the Apache server was installed through the MSA installation program, and you uninstalled the MSA before the Apache server, you will not be able to access the MSA configuration pages after reinstalling the MSA. This occurs because of a conflict in port 16372. Both the Apache server and Messaging Security Agent virtual web site listens to port number 16372.

    For Apache web server and other applications are not using it

      1. Go to Start > Control Panel > Add/Remove Programs.
      2. Uninstall the Apache Web Server.
  3. If you are using a 64-bit operating system, do Steps 3a-3c. Otherwise, proceed to Step 4.
    1. Click Start > All Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
    2. Run the following commands:
      • Uninstall-TransportAgent -Identity "ScanMail SMTP Receive Agent"
      • Uninstall-TransportAgent -Identity "ScanMail Routing Agent"
    3. Stop the Microsoft Exchange Transport service.
  4. Run the following commands to unregister the COM DLLs:
    • regsvr32 -u "C:\Program Files\Trend Micro\Messaging Security Agent\hookSMTP.dll"
    • regsvr32 -u "C:\Program Files\Trend Micro\Messaging Security Agent\perfSmexPerfMonMgr.dll"
  5. Remove the entire installed directory of the MSA, except the Apache2 subfolder. This is located by default in ..\Program Files\Trend Micro\Messaging Security Agent.

    If the installed directory is locked by other programs, stop the IIS service and try again.

    Installing the Apache server during the installation of the Messaging Security Agent will create the Apache2 subfolder. However, do not remove the Apache2 subfolder if other applications are using the Apache server.
  6. Delete the registry keys related to or created by the MSA:
    Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
    • Product registry key in HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange
    • For 64-bit OS: HKLM\SOFTWARE\Wow6432Node\TrendMicro\ScanMail for Exchange
    • Virus scan registry key in HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\VirusScan
    • Virus scan registry key for each mailbox store (if there are):
      • HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\<Computer_Name or VS_Name>\<Store_Name>\VirusScanBackgroundScanning
      • HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\<Computer_Name or VS_Name>\<Store_Name>\VirusScanEnabled
      • HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeIS\<Computer_Name or VS_Name>\<Store_Name>\VirusScanProactiveScanning
    • Service registry keys (if there are):
      • HKLM\SYSTEM\CurrentControlSet\Services\EUQ-Monitor
      • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_Master
      • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_RemoteConfig
      • HKLM\SYSTEM\CurrentControlSet\Services\ScanMail_SystemWatcher
  7. Delete the Trend Micro Messaging Security Agent shortcut from the Start > Programs menu.
  8. Remove the MSA from the Security Server:
    1. Open the WFBS Advanced console on the Security Server.
    2. Click the Security Settings tab and then choose the offline Messaging Security Agent from the client management tree.
    3. Click Remove and then choose the Remove the selected inactive agent(s) option.
    4. Click Apply.
  9. Remove the Uninstall Entry from the Add/Remove Progams console by deleting the HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SMEX_{PRODUCT_ID} registry key.
  10. Restart the computer.

    During the MSA installation, the Active Directory (AD) security group "SMEX Admin Group" and the user account "SMX_<Server_Name>" are created in the Global Catalog on the server. If you want to remove these, do the following:

    If you want to remove "SMEX Admin Group", make sure that it has no other account members.
    1. Click Start > Programs > Administrative Tools > Active Directory Users and Computers.
    2. Select SMEX Admin Group, right-click it, then click Delete.
    3. Select SMX_<Server_Name>, right-click it, then click Delete.

    When the user account is deleted, manually remove the user profile from the server:

    1. On your desktop, right-click My Computer icon then click Properties.
    2. On the System Properties window, click the Advanced tab.
    3. Under User Profiles section, click Settings.
    4. Select SMX_<Server_Name> from the list.
    5. Click Delete.

    For 64-bit OS: If you want to uninstall the SQL Server, click Start > Settings > Control Panel > Add/Remove Programs.

Solution Id:
Did this article help you?

Thank you for your feedback!

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.