How to Uninstall the Trend Micro Client/Server Security Agent Manually

Updated July 19, 2017

The Trend Micro Client/Server Security Agent is the antivirus software that's installed on client computers in a domain set-up. It is part of the Worry-Free Business Suite (WFBS) for small- and medium-sized businesses. The server components of the WFBS include the Messaging Server, which handles spam, and the Security Server, which manages the Client/Server Security Agent. A manual uninstall becomes necessary when all methods to uninstall the product have been exhausted, or to make sure that there are no remnants of the Client/Server Security Agent after an automatic uninstall.

Check whether "TrendProtect" or "Transaction Protector" is installed.

Open the "Client/Server Security Agent" console.

Click the "Security Protection" tab.

Click "Uninstall" for "TrendProtect" or "Transaction Protector."

Click "Start" and "Run."

Type "services.msc" and click "OK" to open the services management console.

Locate the following services and click "Stop" to stop each running service.

-Trend Micro Client/Server Security Agent Listener

-Trend Micro Client/Server Security Agent Personal Firewall

-Trend Micro Client/Server Security Agent RealTime Scan

-Trend Micro Client/Server Security Agent Proxy Service

-Trend Micro Unauthorized Change Prevention Service

Close the services management console.

Click "Start" and "Run."

Type "regedit" and click "OK" to open the registry editor.

Expand the "HKEY_LOCAL_MACHINE" registry hive.

Click and expand "System" then "CurrentControlSet" then "Services."

Delete the following Trend Micro registry keys (these are the registry keys related to the services stopped):















Go back to the "HKEY_LOCAL_MACHINE" registry hive

Click and expand "Software" then "TrendMicro." (For 64-bit operating systems, there is a registry subkey "WOW6432Node" after "Software.")

Delete the following registry keys:




Go back to the "HKEY_LOCAL_MACHINE" registry hive.

Click and expand "Software" then "Microsoft" then "Windows" then "CurrentVersion" then "Run." (For 64-bit operating systems, there is a "WOW6432Node" after "Software.")

Delete the "OfficeScanNT Monitor" key.

Go back to the "CurrentVersion" hive and click "Uninstall."

Delete the "OfficeScanNT" registry key on the right window pane.

Close the registry editor.

Click "Start" and click "All Programs."

Right-click the "Trend Micro Client-Server Security Agent."

Click "Delete."

Click "Start" and "Settings" and "Control Panel."

Double-click "Network Connections."

Right-click a Network Interface Controller (NIC) and click "Properties." Note that depending on the computer, there could be several NICs. One NIC for local area network connection, another NIC for wireless connection.

Delete "Trend Micro Common Firewall Driver" or "Trend Micro NDIS 6.0 Filter Driver," whichever is present.

Repeat the previous two steps for each NIC in the computer.

Right-click "Computer" and click "Manage."

Right-click "Device Manager" and click "View" and click "Show hidden devices."

Double-click "Non-Plug and Play Drivers."

Right-click each of the drivers and click "Uninstall." Do not yet reboot the computer when it prompts to restart for uninstalling each driver.




-Trend Micro FILTER

-Trend Micro PreFilter (Windows 2003 only)

-Trend Micro TDIDriver

-Trend Micro VSAPI NT

Close the "Device Manager."

Go to "My Network Places" and click "Properties."

Click "Trend Micro Common Firewall Driver" and click "Uninstall."

Reboot the computer.

Go to "C:\Program Files\Trend Micro."

Delete the following folders:


-Client/Server Security Agent



Close the folder window.


Backup the registry before making any changes. To backup the entire registry, open the registry editor and right-click "My Computer." Click "Export" to export the entire registry as a backup.

Cite this Article A tool to create a citation to reference this article Cite this Article

About the Author

Chris Loza has published essays and book reviews in major Philippine newspapers since 2005. His work has appeared in the "Philippine Daily Inquirer" and "Philippine Star." Loza also worked as a technical writer for LWS Media. He has a Bachelor of Science in electronics and communications engineering from the Ateneo de Manila University.