檢視次數:
請您參照下方不奏手動移除Deep Security Agent, Relay 和 Notifier:
  1. 從Deep Security Manager (DSM) 將 agent self protection 自我保護功能關閉
    假如不能連線至DSM,可透過 command line 或 registry 操作。
  2. 停止下方服務 
    • Trend Micro Deep Security Relay
    • Trend Micro Deep Security Agent
    • Trend Micro Deep Security Notifier
    • Trend Micro Solution Platform
  3. 確認區域網路連線是否有下方driver資訊,若有請移除 
    • Trend Micro DSA Filter Driver (For Windows 2003)
    • Trend Micro LightWeight Filter Driver (For Windows 2008)
  4. 開啟命令提示字元,並輸入下方指令刪除服務:
    • sc delete ds_agent
    • sc delete ds_notifier
    • sc delete Amsp
    • sc delete tmactmon
    • sc delete tmevtmgr
    • sc delete tmcomm
  5. 刪除下方機碼資訊: 
    重要:不正確異動機碼可能會導致系統問題,請先參照 back up the whole registry 進行備份。
  • HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\AEGIS
  • HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\AMSP
  • HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\AMSPStatus
  • HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Deep Security Agent
  • HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\WL
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Amsp
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ds_agent
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ds_notifier
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tbimdsa
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmactmon
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmcomm
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmevtmgr
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Deep / Security Agent
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Deep / Security Relay
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\System\tbimdsa\

 

(Agent 32-bit)

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\
    80E7CC013A4CD8F44AC9B49EB061392B]\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\
    80E7CC013A4CD8F44AC9B49EB061392B]\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\
    689D08D76B5A47A4FB59D97D2C4B9308]\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\
    689D08D76B5A47A4FB59D97D2C4B9308]\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    {10CC7E08-C4A3-4F8D-A49C-4BE90B1693B2}]\

 

(Agent 64-bit)

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\
    C4AF20E48325C454BBBE163E418FCEA9\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\
    C4AF20E48325C454BBBE163E418FCEA9\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\
    689D08D76B5A47A4FB59D97D2C4B9308\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\
    689D08D76B5A47A4FB59D97D2C4B9308\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    {4E02FA4C-5238-454C-BBEB-61E314F8EC9A}\

 

(Relay 32-bit)

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\
    C576B4AC76DEBD7428E62A20748B5BEE\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\
    C576B4AC76DEBD7428E62A20748B5BEE\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\
    9595A43D099883B49B6A1D3194B54E48\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\
    9595A43D099883B49B6A1D3194B54E48\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    {CA4B675C-ED67-47DB-826E-A20247B8B5EE}\

 

(Relay 64-bit)

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\
    8AD1116DC93642C4F9032F4EFE4F1425\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\
    8AD1116DC93642C4F9032F4EFE4F1425\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\
    9595A43D099883B49B6A1D3194B54E48\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\
    9595A43D099883B49B6A1D3194B54E48\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    {D6111DA8-639C-4C24-9F30-F2E4EFF44152} \

 

(Notifier 32-bit)

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\
    C2B7CFB8EB0E6FC4CA6C5E010B7B4298\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\
    C2B7CFB8EB0E6FC4CA6C5E010B7B4298\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\
    FD7DF71DF377E464F8F59FDA68339BD0\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\
    FD7DF71DF377E464F8F59FDA68339BD0\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    {8BFC7B2C-E0BE-4CF6-ACC6-E510B0B72489} \
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
    Deep Security Notifier (string / REG _ SZ)
6. 重新啟動電腦
7. 刪除下方檔案和資料夾
  • C:\WINDOWS\System32\Drivers\tbimdsa.sys
  • C:\WINDOWS\System32\Drivers\tmactmon.sys
  • C:\WINDOWS\System32\Drivers\tmcomm.sys
  • C:\WINDOWS\System32\Drivers\tmevtmgr.sys
  • C:\WINDOWS\System32\LogFiles\ds_agent\
  • C:\Program Files\Trend Micro \AMSP\
  • C:\Program Files\Trend Micro \Deep Security Agent\Agent
  • C:\Program Files\Trend Micro \Deep Relay of Security Settings\Local (Relay)
  • C:\Program Files\Trend Micro \Deep Notifier of Security Settings\Local (Notifier)
  • C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Trend Micro\
    Deep Security\Trend Micro Deep Security Notifier (for Windows 2008)
  • C:\Documents and Settings\All Users\Start menu\programs\Trend Micro\
    Deep Security\Trend Micro Deep Security Notifier (for Windows 2003)
  • C:\Windows\Installer\ {10CC7E08-C4A3-4F8D-A49C-4BE90B1693B2} / (Agent 32-bit)
  • C:\Windows\Installer\ {4E02FA4C-5238-454C-BBEB-61E314F8EC9A} / (Agent 64-bit)
  • C:\Windows\Installer\ {CA4B675C-ED67-47DB-826E-A20247B8B5EE} / (Relay 32-bit)
  • C:\Windows\Installer\ {D6111DA8-639C-4C24-9F30-F2E4EFF44152} / (Relay 64-bit)
  • C:\Windows\Installer\ {8BFC7B2C-E0BE-4CF6-ACC6-E510B0B72489} / (Notifier 32-bit)