Helping people with computers... one answer at a time.

Used machines often bring with them issues like password-protected installations. Unfortunately, that's not the only thing that they might bring.

I purchased a used machine from a neighbor who had bought it from his workplace. He is no longer in the neighborhood, so I can't ask him about this. The program, Trend Micro, is the virus-scan program that was on the machine when I bought it. I'd prefer to use AVG but when I try to install AVG, it tells me that there's a conflict with another virus scanner and that I must delete that one before installing AVG. So, I went to Add/Remove programs and clicked on 'Remove'. It came up with a dialog box, requesting that I enter a password in order to uninstall the program. And that's where the problem lies. I don't have the password nor do I know how to get in touch with the guy who sold the machine to me. How in the world can I get rid of Trend Micro? I don't know if it's actually scanning my machine, if it's up to date, or how to use it. Any suggestions?

I do have a suggestion and I can tell you right now that you're not going to like it.

And because I know that there's a really good chance that you won't want to follow my suggestion, I'll throw out a few other ideas as well.

Reformat the Machine

This isn't about removing Trend Micro - they're reputable folk with a reasonable product.

"... a second-hand computer is like a box of chocolates: you never know what you're gonna get."

This is about your safety.

This is about what else is on the machine.

The problem is that when you get a second-hand computer, you don't know what else is on the machine.

For all you know, it's infested with malware (perhaps the Trend Micro's a fake).

For all you know, there's illegal content hidden in unexplored corners of the machine.

For all you know, your neighbor was a corporate or government spy and hidden on the machine are our nation's nuclear launch codes or the data to build some kind of bio-weapon.

OK, that last one might be a tad far-fetched in the details (I watch too many movies), but the fact is that you don't know what your former neighbor was keeping on his machine, or just how internet-savvy and safety-conscious he was.

To mangle Forrest Gump a little, a second-hand computer is like a box of chocolates: you never know what you're gonna get.

There's only one way to know what you have: erase the hard disk(s) completely (I recommend DBAN) and install the operating system and all applications from scratch.

I told you that you won't like it, but it's the only safe way to be sure.

Uninstall

As I said earlier, Trend Micro is a reasonable product and I'd even consider suggesting that you leave it on the machine.

If you had the password, that is.

So, the only option is to try to remove it.

As you've seen, the uninstall process is password-protected. That's actually not an unreasonable security measure, but it definitely gets in the way of your very legitimate needs.

Here's what I would try in the order that I would try it:

  • Revo Uninstaller. The first thing that it does is it attempts to run the uninstall that you've already attempted, but after that, it performs some more aggressive scans of your system and registry to try and remove leftovers. Because everything will be left over, it may have some success. It also wouldn't surprise me if you needed to try it more than once, with reboots in between.

  • In the Program Files folder (or Program Files (x86) folder), delete the Trend Micro folder or at least as much of its contents as you can. (If you're running Windows Vista or Windows 7, you'll need to do this by running as Administrator, not just logged in as an administrator.) I expect that many of the files will be in use, but perhaps on the next reboot, enough of these will be gone so as to cause a program failure and you can repeat this step. It may also be helpful to first right-click on My Computer, click on Manage, expand Services and Applications, click on Services and look for services related to Trend Micro. Then, you can right-click and stop any of them that you find.

  • Reboot using a Linux live CD (Ubuntu in the "try it out" mode will do) and delete the Trend Micro Program Files folder on your hard disk. This should work. You may need to clean up some auto-start settings after you reboot back into Windows. Perhaps Revo can clean this up and more for you.

As you can see, it gets kind of ugly. But it should be possible. (You might also check the comments below for additional reader suggestions - I may have overlooked some alternatives.)

And then, yes, as soon as this is gone, make sure that you scan the heck out of that machine with AVG, with anti-spyware tools, MalwareBytes and whatever else that you might want to use to raise your level of confidence that the machine is safe.

As you might guess, my level of confidence remains low.

Article C4756 - March 3, 2011 « »

Share this article with your friends:

Share this article on Facebook Tweet this article Email a link to this article
Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

Recent Comments
14 Comments
Bummper
March 8, 2011 2:40 PM

Download the Trend Micro Diagnostic Toolkit. Last Tab is: "Uninstall", Choose "Uninstall software". Reboot at the prompt. You're done.

http://esupport.trendmicro.com/1/How-do-I-remove-old-or-new-versions-of-Trend-Micro-products-in-my-comp.aspx

Lack of a password should not be a problem, but you can also resolve that here:

http://community.trendmicro.com/t5/Home-and-Home-Office-Forum/Password-How-to-reset-or-remove/td-p/8639

Cheers.

Dave
March 8, 2011 3:45 PM

I agree with 'Frank' about CCleaner, I do PC repair for a living and CCleaner has never failed me either (nor Malwarebytes for that matter)! You can use CCleaner's uninstall feature, it's much more efficient than Window's uninstaller. \

But I personally would follow Leo's suggestion first about reformatting your drive, or better yet buying a new one. Recently I was doing a 'data recovery' job for one of my regular customer's laptops. When doing recovery, you generally can't "see" photo's, files, etc. during the recovery process. You only see the file or photo's filename and if it's recoverable. It turned out when I was finished and we were reviewing everything I found that many were porn photos.

Not surprisingly, they weren't from him but from the previous owner! These just as easily could have been child porn or something else illegal. Always wipe (over-write) the drive as well if you are going to re-use one. CCleaner also has this feature.

And for anyone thinking of acuiring a used computer (or if you've had one stolen), I strongly suggest visiting Stolen Computer Registry @ www.stolencomputers.org.

Bruce Ogden
March 8, 2011 7:11 PM

Some time ago I wrote a tutorial on Vista Forums showing several ways to achieve a thorough uninstall (this also applies to Win 7) . Some applications, including many antivirus programs, can only be completely uninstalled by additionally using proprietary uninstall programs (i.e. McAfee and others have ancillary programs that remove remnants of the program after doing the routine Add/Remove uninstall).

Where the usual Add/Remove uninstall fails to completely uninstall a program and no proprietary ancillary uninstaller is available, a manual uninstall can be performed; the procedure for doing this is outlined in the tutorial.

My favorite uninstall application is Smarty Uninstaller by WinnerTweak Software. After running the usual uninstall process connected with the program you're trying to uninstall, Smarty UI digs deep into your file system and registry to remove all traces of the program. Smarty UI is free to try and inexpensive to buy considering the excellent job it does.

Unless the existing program is cleanly uninstalled and remnants and left-over debris is removed, updated programs or different programs that perform similar functions (i.e. antivirus programs) often cannot be installed properly.

http://www.vistax64.com/tutorials/87249-unable-install-latest-version-program-vista.html

Peter Nixon
March 9, 2011 10:44 AM

IF you decide to trust the machine, and that's a big if, you can disable it using msconfig - uncheck the boxes in "startup" and "services" - I've used this occasionally to run an alternative A/V without removing the first one.

Mark Magill
March 12, 2011 7:43 PM

Having spent the last couple decades or so repairing computers, I have to agree with the wipe-the-drive or replace it sentiment. After all, on a used system you never really know what all is on it, how old it is, and how close to failure its hard drive might be. As cheap as they are, a new hard drive brings a lot of peace of mind and is not a bad idea unless one just can not possibly afford one.