Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

How to manually remove the Stand-Alone Vulnerability Protect Agent (VPA)

    • Updated:
    • 7 Aug 2019
    • Product/Version:
    • Platform:
    • N/A N/A
Summary

In case you are unable to successfully uninstall the Vulnerability Protection Agent, manual removal is required.

Details
Public

To manually uninstall the Vulnerability Protection Agent:

  1. Stop VPA services:

    sc stop ds_agent
    sc stop tbimdsa

  2. Delete VPA services:

    sc delete ds_agent
    sc delete tbimdsa

  3. Delete all files under following paths for VPA:
    • C:\Program Files\Trend Micro\Vulnerability Protection Agent\*
    • C:\ProgramData\Trend Micro\Deep Security Agent\*
    • C:\Users\All Users\Trend Micro\Deep Security Agent\*
    • C:\Windows\System32\DriverStore\FileRepository\nettbimdsa.inf_amd64_neutral_7bf92935b96598b1
    • C:\Windows\System32\DriverStore\FileRepository\nettbimdsa.inf_amd64_neutral_7bf92935b96598b1\nettbimdsa.inf
    • C:\Windows\System32\DriverStore\FileRepository\nettbimdsa.inf_amd64_neutral_7bf92935b96598b1\nettbimdsa.PNF
    • C:\Windows\System32\DriverStore\FileRepository\nettbimdsa.inf_amd64_neutral_7bf92935b96598b1\tbimdsa.cat
    • C:\Windows\System32\DriverStore\FileRepository\nettbimdsa.inf_amd64_neutral_7bf92935b96598b1\tbimdsa.sys
  4. Delete all the following registry keys for VPA:
    • HKEY_CLASSES_ROOT\Installer\Products\F9103782F03CC464BA026FD9C854064A
    • HKEY_CLASSES_ROOT\Installer\UpgradeCodes\689D08D76B5A47A4FB59D97D2C4B9308
    • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\F9103782F03CC464BA026FD9C854064A
    • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F9103782F03CC464BA026FD9C854064A
    • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\689D08D76B5A47A4FB59D97D2C4B9308
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\689D08D76B5A47A4FB59D97D2C4B9308\
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2873019F-C30F-464C-AB20-F69D8C4560A4}.
       
      The name {2873019F-C30F-464C-AB20-F69D8C4560A4} may be different with different versions/architectures of the OS. You can search for those with the key "Display name" = "Trend Micro Vulnerability Protection Agent".
    • HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Deep Security Agent
    • HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Vulnerability Protection Agent
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TBIMDSA
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ds_agent
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\tbimdsae
    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Vulnerability Protection Agent
Premium
Internal
Rating:
Category:
Troubleshoot; Uninstall
Solution Id:
1123410
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.