Learn the steps to change IM Security Hook Agent (IMShookAgent) Identity after recreating the notification account as described in this Knowledge Base article.
To change IMShookAgent Identity:
- Stop the following IM Security services:
- Trend Micro IM Security Server
- Trend Micro IM Security System Attendant
- Open the Component Services MMC (comexp.msc).
- Go to My Computer > COM+ Applications.
- Right-click the IMShookAgent and select Shut Down.
- Open a command prompt (cmd.exe) with Domain or Local Administrators privileges and change directory to C:\Windows\Microsoft.NET\Framework64\v2.0.50727.
In Windows Server 2012, the directory should be C:\Windows\Microsoft.NET\Framework64\v4.0.30319.
- Execute the following command to unregister hookServerAgentWrapper:
regasm /u "c:\Program Files (x86)\Trend Micro\IM Security\hookServerAgentWrapper.dll"
- Delete the IMShookAgent in the COM+ Application.
- Execute the following command to register hookServerAgentWrapper:
regasm "c:\Program Files (x86)\Trend Micro\IM Security\hookServerAgentWrapper.dll"
- In the command prompt, change directory to %PROGRAMFILES%\Trend Micro\IM Security.
- Execute the following command to create IMShookAgent with the correct IM Security Notification Account credentials.
cscript IMSAgentReg.vbs /install IMSHookAgent "c:\Program Files (x86)\Trend Micro\IM Security\hookServerAgentWrapper.dll" [notification account] [notification account password]
The notification account should be in the Domain\Username format. - Restart IM Security services and the new IMShookAgent Module.