Thursday, January 7, 2010

Forcefully Uninstall Trend ServerProtect 5.7

I tried to deploy Trend ServerProtect to a server that had a corrupt install of ServerProtect using the Trend Micro ServerProtect Management Console. However when deploying I kept receiving the following error:

Error: ServerProtect server is not available
Target server: servername



To get around this I had to forcefully remove ServerProtect from the Server with the issue.

I did this using the following procedure.

1. Stop the following services (if they exist):
- Trend ServerProtect
- Trend ServerProtect Agent

2. Open the Registry Editor. Make sure you create a full backup of the registry before making modifications.

3. Delete the following keys if they still exist:
- HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\ServerProtect
- HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\DebugLog
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SpntSvc
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EarthAgent
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TMFilter
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmpreflt (Windows 2003 only)
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VsapiNT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect for NT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect IS
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect Management Console

4. Close the Registry Editor

5. Delete the ...\Program Files\Trend\Sprotect folder.

6. Delete the Trend ServerProtect Management Console program menu.

7. Delete the ServerProtect Devices:
- Go to the Control Panel > Administrative Tools > Computer Management
- Open the System Tools tree, select Device Manager.
- Enable hidden devices from the view menu.
- Expand Non-Plug and Play Drivers tree.
- Delete the following devices:
* Trend ServerProtect Prefilter (Windows 2003 only)
* Trend ServerProtect Filter
* Trend ServerProtect Scan Engine
* StartAG
* StartNS
* tmcomm

To each of these drivers when it asks to reboot click "No". Uninstall all of them first. They wont disappear until you do the reboot.

8. Restart the server and verify that the devices no longer exist.

9. Reinstall Trend ServerProtect to the problem PC.





Also see my post for forcefully removing Trend Officescan Client:

http://clintboessen.blogspot.com/2009/09/forcefully-remove-trend-officescan.html

No comments:

Post a Comment