Steps to uninstall IBM Security Host Protection for Windows

Technote (FAQ)


Question

How do you uninstall IBM Security Host Protection for Windows?

Answer

Follow the instructions below to uninstall IBM Security Host Protector for Windows.

  1. Prior to uninstalling the agent, you must first disable agent protection. To do this, open a command prompt and run the following:

    <drive>:\Program Files\[IBM] ISS\Server Protection\rapapp -ap <password>

    Note:
    If no password is in use, run the following command:

    <drive>:\Program Files\[IBM] ISS\Server Protection\rapapp -ap

  2. Once agent protection is disabled, run the following command from a command prompt to uninstall Host Protection for Windows agent:

    <drive>:\Program Files\[IBM] ISS\Server Protection\AgentRemove.exe -full

    An uninstall log will be generated in C:\Windows\AgentRemove.log.

  3. Open the registry and delete the registry keys listed below if they exist:
    • HKLM\Software\Agent
    • HKLM\Software\ISS
    • HKLM\System\CurrentControlSet\Services\blackICE
    • HKLM\System\CurrentControlSet\Services\RapAPP
    • HKLM\System\CurrentControlSet\Services\issfltr
    • HKLM\System\CurrentControlSet\Services\issnet
    • HKLM\System\CurrentControlSet\Services\issnfh
    • HKLM\System\CurrentControlSet\Services\W32Yelo

  4. Open a command prompt and run the following commands to remove the services if they exist:
    • sc delete VPatch
    • sc delete blackice
    • sc delete rapapp
    • sc delete ibmproventia

  5. Delete the following directories and files if they exist:
    • \Program Files\ISS\proventia server
    • \Windows\System32\blackdll.dll
    • \Windows\System32\drivers\blackcat.sys
    • \Windows\System32\drivers\MakoNT.sys
    • \Windows\System32\drivers\isskboep.sys
    • \Windows\System32\drivers\issnetv.sys
    • \Windows\System32\drivers\issnfhv.sys

  6. Reboot the server.

Finally, the agent within SiteProtector can be manually removed. To do this, go into the Agent view and right click on the icon of the recently uninstalled agent. Then, click Delete for it to be removed.


If the above information does not resolve your issue, contact IBM Security Systems Customer Support.

Rate this page:

(0 users)Average rating

Document information


More support for:

IBM Security Host Protection

Software version:

2.1, 2.2, 2.2.2

Operating system(s):

Windows

Reference #:

1616265

Modified date:

2014-10-20

Translate my page

Machine Translation

Content navigation