Remove or Reset Trend Micro OfficeScan,client/server or security server Uninstall Password to Default

Trend Micro Office Scan:

So how to uninstall or remove Trend Micro Office Scan when the password to uninstall is unknown or lost? Here’s a simple hack to remove or reset the uninstallation password for TrendMicro OfficeScan, after which user can uninstall Trend Micro Office Scan by using the default password.

1. Search for Ofcscan.ini file. Normally the file is located in C:\Windows folder for Windows 95 and Windows 98, or C:\WINNT directory for Windows NT and Windows 2000. In newer operating system, the Ofcscan.ini can be saved in C:\Program Files\ folder.
2. Open the Ofcscan.ini file using Notepad for editing.
3. Search for the [INI_CLIENT_SECTION] section heading.
4. Locate the line starting with Uninstall_Pwd=. Comment the line (make it inactive by typing a # at the beginning of the line, i.e. #Uninstall_Pwd=…..
5. Insert a new line beneath the existing line as following:Uninstall_Pwd=70
6. Save the Ofcscan.ini file.
7. Try to uninstall Trend Microsoft OfficeScan again. When prompted to enter a password to continue to uninstall, enter 1 as the password.

Trend Micro client/server agent uninstall :

This enables the removal without password:

Find HKLMSOFTWARETrendMicroPC-cillinNTCorpCurrentVersionMisc.

and set “Allow Uninstall” = 1

TrendMicro Security Server uninstall:

1. Go to the c:\Program Files\Trend Micro\Security server\PCCSRV\Private directory or where ever you have installed the program. Note: You may need to stop the TrendMicro services. If you can’t find this directory then just do a search for the file.

2. Open the ofcserver.ini file.

3. Look for the MasterPwd= parameter under the [INI_SERVER_SECTION] section.

4. Replace the MasterPwd= value with 70 .

5. Save and close the ofcserver.ini file.

6. Restart TM Security server Master Service if you need to get into the console itself, or just start your uninstaller.

7. Log into the Security dashboard and type 1 as the password or start your uninstaller and type the password 1.

You may need to change the value in the [INI_CLIENT_SECTION] as well.

Remove the !CRYPT!garbage and replace with the value 70 like this:

Uninstall_Pwd=70
Unload_Pwd=70

I found that there where some laptops that where never uninstalled and with Norton(BLAH) now in place on the server I have to change this value to uninstall the client.