«
»

Removing Trend Micro Client/Server Security Silently Through Kaseya or a Login Script


As you might have noticed from my last post I have spent some time cleaning up Trend Micro issues on my networks this week. I have a few installs that are messed up and need a reinstall so I made this.

Script Name: Trend Micro Uninstall
Script Description: Uninstall Trend Micro client
IF True
THEN
Set Registry Value
Parameter 1 : HKEY_LOCAL_MACHINESOFTWARETrendMicroPC-cillinNTCorpCurrentVersionMisc.Allow Uninstall
Parameter 2 : 1
Parameter 3 : REG_DWORD
OS Type : 0
Execute File
Parameter 1 : c:Program FilesTrend MicroClient Server Security Agentntrmv.exe
Parameter 2 : /silent /noreboot
Parameter 3 : 0
OS Type : 0
ELSE


Essentially this will uninstall the trend client from the computer with no user interaction required. Though the silent switch is employed there is still a progress window that I can’t seem to suppress.

This can be used as a login script by importing the registry key and then running the uninstaller.  Save the below as trend.reg:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESOFTWARETrendMicroPC-cillinNTCorpCurrentVersionMisc.]
“Allow Uninstall”=dword:00000001

And run this batch file at login, change the red to match your paths:

Regedit /s g:registrytrend.reg
c:Program FilesTrend MicroClient Server Security Agentntrmv.exe /silent /noreboot

When run on login the Trend Product will be automatically removed thus preparing the computer for a Trend reinstall, or a new anti-virus install.

, ,

This entry was posted on April 16, 2010, 10:44 am and is filed under Hardware, Rants, Scripts, Security, Software. You can follow any responses to this entry through RSS 2.0. You can leave a response, or trackback from your own site.

  1. #1 by rob on April 27, 2010 - 9:35 am

    i knew it was possible but i wasn’t sure how but well done on your script & how to… after much searching i found your link & was very pleased.

    Cheers for sharing…

    Quote

  2. #2 by Graeme Carstairs on October 14, 2010 - 8:49 am

    Or you could try the wonderful ntrmv.exe

    you can use it direct on the machines, or through a script or via PSEXEC against all PC you can find.

    its is usually in

    c:\Program Files\Trend Micro\Client server security Agent\
    or whatever the path to your trend files.

    And the command is NTRMV.exe -331

    This silently terminates the services, deletes nearly all the files and folders, and removes from the registry.

    Once machine rebooted delete the Trend Folder to get rid of the last 1 or 2 files left.

    Quote

  3. #3 by Spraulin on November 2, 2010 - 11:22 pm

    Cheers for you help Graeme Carstairs. Your cmd worked without asking me the password for my redistributable installation :D

    Quote
(will not be published)