Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Manually uninstalling the Worry-Free Business Security Services (WFBS-SVC) Agent

    • Updated:
    • 8 Dec 2016
    • Product/Version:
    • Worry-Free Business Security Services 5.7
    • Worry-Free Business Security Services for Dell 5.6
    • Platform:
    • Windows 2003 Server R2
    • Windows 2008 Datacenter
    • Windows 2008 Datacenter 64-bit
    • Windows 2008 Enterprise
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows Vista 32-bit
    • Windows XP Home
Summary

This procedure shows how to manually remove the Worry-Free Business Security Services agent.

Details
Public

To uninstall the WFBS-SVC Agent:

  1. Open the Services console and stop the following services:
    • Trend Micro Client/Server Security Agent
    • Trend Micro Security Agent
    • Trend Micro Security Agent Listener
    • Trend Micro Security Agent Personal Firewall
    • Trend Micro Security Agent RealTime Scan
    • Trend Micro Security Agent NT Proxy Service (Win7 and below)
    • Trend Micro Unauthorized Change Prevention Service
    • Trend Micro Common Client Solution Framework
  2. Open the Task Manager and make sure the following processes are not running:
    • Hostedagent.exe
    • svcGenericHost.exe
    • Ntrtscan.exe
    • PccNTMon.exe
    • TMBMSRV.exe
    • TmCCSF.exe
    • TmListen.exe
    • Tmproxy.exe
    • Pccntupd.exe
    • xpupg.exe
  3. Open the command prompt using administrator privileges and execute the following commands one by one:
    • For 32-bit:

      regsvr32 /u /s "C:\program files\trend micro\Security Agent\tmdshell.dll"
      taskkill /F /IM explorer.exe
      start explorer.exe

    • For 64-bit:

      regsvr32 /u /s "C:\program files (x86)\trend micro\Security Agent\tmdshell_64x.dll"
      taskkill /F /IM explorer.exe
      start explorer.exe

  4. Open the Registry Editor to delete registry keys that belong to WFBS.
     
    Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
  5. Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services and delete the following registry keys:
    • Ntrtscan
    • Tmactmon
    • TMBMServer
    • TmCCSF
    • TMCFW (Windows XP)
    • Tmcomm
    • TMEBC
    • Tmeevw (Windows 8)
    • tmevtmgr
    • TmFilter
    • Tmlisten
    • TMLWF(Windows Vista and later)
    • TmPfw
    • TMPreFilter
    • TmProxy (Windows 7 and below)
    • Tmtdi (Windows 7 and below)
    • Tmusa (Windows 8)
    • tmwfp (Windows Vista and later)
    • VSApiNt
    • SvcGenericHost
  6. Locate and delete the following registry keys:
    • For 32-bit:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OfficeScan Monitor

    • For 64-bit:

      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\OfficeScan Monitor

  7. Locate HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ and delete the following registry keys:
    • HKLM\Software\Microsoft\windows\currentversion\uninstall\Wofie
    • For 32-bit:

      HKLM\Software\Microsoft\windows\currentversion\uninstall\{C1F6E833-B25E-4C39-A026-D3253958B0D0}

    • For 64-bit:

      HKLM\Software\Microsoft\windows\currentversion\uninstall\{A38F51ED-D01A-4CE4-91EB-B824A00A8BDF}

  8. Locate and delete the following registry keys:
    • For 32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\
      • AEGIS
      • AMSP
      • ClientStatus
      • NSC
      • Osprey
      • Pc-cillinNTCorp
      • Wofie
    • For 64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\
      • AEGIS
      • AMSP
      • NSC
      • Osprey
      • Wofie
  9. Locate and delete the following keys from the HKEY_CLASSES_ROOT\Installer\ registry hive:
    • For 32-bit:
      • HKEY_CLASSES_ROOT\Installer\Features\338E6F1CE52B93C40A623D5293850B0D
      • HKEY_CLASSES_ROOT\Installer\Products\338E6F1CE52B93C40A623D5293850B0D
      • HKEY_CLASSES_ROOT\Installer\Upgradecodes\8A88AE84D667B304CB368C99791A74A6
    • For 64-bit:
      • HKEY_CLASSES_ROOT\Installer\Features\DE15F83AA10D4EC419BE8B420AA0B8FD
      • HKEY_CLASSES_ROOT\Installer\Products\DE15F83AA10D4EC419BE8B420AA0B8FD
      • HKEY_CLASSES_ROOT\Installer\Upgradecodes\8A88AE84D667B304CB368C99791A74A6
  1. Open the Services console.
    1. On your Desktop, click Start > Run.
    2. On the Open field, type "services.msc" and then click OK.
  2. On the right panel, right-click each of the following services, and then click Stop.
    • Trend Micro Client/Server Security Agent
    • Trend Micro Client/Server Security Agent Listener
    • Trend Micro Client/Server Security Agent Personal Firewall
    • Trend Micro Client/Server Security Agent RealTime Scan
    • Trend Micro Client/Server Security Agent Proxy Service
    • Trend Micro Unauthorized Change Prevention Service
  3. Open the Registry Editor (regedit.exe).
    1. Click Start > Run.
    2. Type "regedit" and then click OK.
       
      Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
  4. Go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services and delete the following registry keys:
    • Ntrtscan
    • PccNTUpd
    • Perf_iCrcPerfMonMgr
    • SvcGenericHost
    • Tmactmon
    • TMBMServer
    • TMCFW
    • Tmcomm
    • Tmevtmgr
    • TmFilter
    • Tmlisten
    • Tmlwf
    • TmPfw
    • TMPreFilter
    • TmProxy
    • Tmtdi
    • Tmwfp
    • VSApiNt
  5. Go to one of the following registry hives:
    • For 32-bit: HKEY_LOCAL_MACHINE\Software\TrendMicro
    • For 64-bit OS: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro

      And delete the following:

      • AEGIS
      • OfcWatchDog
      • Pc-cillinNTCorp
      • NSC
  6. Do the following:
    • For 32-bit:
      • Go to HKEY_LOCAL_MACHINE\Software\Microsoft\WINDOWS\CurrentVersion\Run and delete the "OfficeScanNT Monitor" key.
      • Go to HKEY_LOCAL_MACHINE\Software\Microsoft\WINDOWS\CurrentVersion\Run and delete the "OE" key
    • For 64-bit:
      • Go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run and delete the "OfficeScanNT Monitor" key.
      • Go to HKEY_LOCAL_MACHINE\ SOFTWARE\Wow6432Node\Microsoft\Windows \CurrentVersion\Run and delete the "OE" key.
  7. Do the following:
    • For 32-bit:

      Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BED0B8A2-2986-49F8-90D6-FA008D37A3D2}

    • For 64-bit:

      Delete HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\\{BED0B8A2-2986-49F8-90D6-FA008D37A3D2}.

  8. Click Computer (Top most key) and on the Menu bar, click Edit > Find.
  9. Type "TrendMicro" (without the quotes), and then click Find Next.
  10. Right-click the registry key and choose Delete.
  11. Press F3.
  12. Delete all Trend Micro keys it finds on the registry. Bypass Trend Micro legacy drivers below:
    • LEGACY_TMACTMON
    • LEGACY_TMCOMM
    • LEGACY_TMEVTMGR
    • LEGACY_TMFILTER
    • LEGACY_TMLWF
    • LEGACY_TMPREFILTER
    • LEGACY_TMTDI
    • LEGACY_TMWFP
    • LEGACY_VSAPINT
  13. Repeat Steps 8 to 11 using "Trend Micro" as a keyword.
  14. Go to Start > Programs. Right-click Trend Micro Client-Server Security Agent, and then click Delete.
  15. Open Task Manager and stop the following process:
    • PCC_NTmon.exe
    • TMAS_OEmon.exe
  16. Delete the C:\Program Files\Trendmicro folder.
  17. Log on to the WFBS-SVC console.
  18. Click Devices.
  19. Select the offline Client Server Security Agent from the Client Management Tree.
  20. Click Remove.
  21. Click OK.
  22. On your Desktop, right-click My Computer and select Manage.
  23. Click the Device Manager, then right-click it again.
  24. Click View > Show hidden devices.
  25. Double-click Non-Plug and Play Drivers.
  26. Right-click each of the following devices and click Uninstall.
     
    Do not reboot the computer at this point.
    • tmactmon
    • Tmcomm
    • Tmevtmgr
    • Trend Micro Filter
    • Trend Micro NDIS 6.0 Filter Driver
    • Trend Micro PreFilter
    • Trend Micro TDIDriver
    • Trend Micro VSAPI NT
    • Trend Micro WFP Callout Driver
  27. Restart the computer.
Premium
Internal
Rating:
Category:
Uninstall
Solution Id:
1058855
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.