在公司,給個人mac 筆電裝了公司的查殺毒軟件,此後,這貨就像揮之不去的病毒,就像你心理上陰影同樣如影隨形,最鄰人方案的是這貨沒界面,只是個後臺服務,通常人就沒辦法了。最最使人反感的是它常常控制/拖慢網速,最最最使人反感的是它常常控制個人行爲——不讓我破解軟件!css
好吧,你既然這麼難纏,是個老大難,就是卸載了你。可是趨勢的東西卸載都要密碼!要不就是卸載工具和安裝包在一塊兒,且安裝之後是沒有卸載入口的!好吧,請教度娘:給的方案都是win下的刪除註冊表,我倒 (⊙o⊙)…,什麼?沒有mac方案?我倒。。。好不容易找到mac下的解決辦法,點進去一看:是趨勢科技的官網給的解決方案:說了一堆天書般的,聖經般的沒用的東東。app
哎,自力根生吧。忽然想到:Linux/nunix系列是沒有註冊表之說的,自立根生沒問題的,徹底能夠本身卸載。工具
來來來,先看看,這貨的平常:
spa
這貨就點哪一個都不出現窗口/界面。下面是鼠標懸浮時的窗口:unix
給咱們的有用信息是【Trend Micro】 ,整個磁盤查找都沒有半點文件的跡象。。。日誌
因而,找到進程,雙擊查看進程,點擊取樣,可獲得以下:code
cwd / txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/MacOS/UIMgmt txt /Library/Frameworks/TMAppCore.framework/Versions/A/TMAppCore txt /Library/Frameworks/TMAppCommon.framework/Versions/A/TMAppCommon txt /Library/Application Support/TrendMicro/common/lib/libTmLog.dylib txt /Library/Application Support/TrendMicro/common/lib/libTmUtil.dylib txt /usr/lib/dyld txt /Library/Frameworks/iCoreClient.framework/Versions/A/iCoreClient txt /Library/Application Support/TrendMicro/common/lib/libprotobuf-lite.dylib txt /Library/Frameworks/iCoreClientPb.framework/Versions/A/iCoreClientPb txt /System/Library/CoreServices/Encodings/libSimplifiedChineseConverter.dylib txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/Assets.car txt /private/var/folders/6z/hby371v12319h_64sn6n41qm0000gn/C/com.apple.IntlDataCache.le.kbdx txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/en.lproj/popupBG_RTS.png txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/popup_bt_off.png txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/en.lproj/popupBG_UgdReboot.png txt /usr/share/icu/icudt57l.dat txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/SystemAppearance.car txt /System/Library/Fonts/SFNSText.ttf txt /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/AppleKeyboardLayouts-L.dat txt /private/var/folders/6z/hby371v12319h_64sn6n41qm0000gn/0/com.apple.LaunchServices-175-v2.csstore txt /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/Extras2.rsrc txt /System/Library/Fonts/Helvetica.dfont txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/TMCCMac.icns txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/tball_normal.png txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/tball_offline.png txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/VibrantLightAppearance.car txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/FunctionRowAppearance.car txt /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/HIToolbox.rsrc txt /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/Localized.rsrc txt /Library/ScriptingAdditions/BartenderHelper.osax/Contents/MacOS/BartenderHelper txt /Applications/Bartender 2.app/Contents/Resources/BartenderHelperTwoOneThree.bundle/Contents/MacOS/BartenderHelperTwoOneThree txt /System/Library/Fonts/SFNSDisplay.ttf txt /System/Library/Fonts/Keyboard.ttf txt /private/var/db/dyld/dyld_shared_cache_i386 txt /Library/Frameworks/TMGUIUtil.framework/Versions/A/TMGUIUtil 0 /dev/null 1 /dev/null 2 /dev/null 3 /private/var/log/TrendMicro/TmccCore/iCoreClientPb.log 4 /private/var/log/TrendMicro/TmccCore/iCoreClient.log 5 /Users/HFB/Library/Logs/TrendMicro/Debug/Application/UIMgmt.log 6 /private/var/log/TrendMicro/TmccCore/iFrameWork.log 7 ->0xbce5551b6e807ed 8 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/Extras2.rsrc 10 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/HIToolbox.rsrc 11 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/Localized.rsrc
看,有好多有關這貨的資源調用咱們得一個一個分析,如果系統的則略過,如果這個貨的則先把文件/文件夾打個壓縮包做爲備份(等最後分析出那個該刪哪一個不應刪,不應刪的還原就好),再把源文件刪除。重啓電腦。這貨是隨機啓動的,重啓就知道卸載好了沒。orm
最後知道哪一個該刪哪一個不應刪,不應刪的還原就好。blog
先把子進程和父進程殺掉。 進程
。。。
通過幾小時的浴血奮戰終於真相大白:
1》這貨的安裝目錄是:/Library/Application Support/TrendMicro
2》這貨的日誌目錄是:/private/var/log/TrendMicro和/Users/HFB/Library/Logs/TrendMicro
哈哈,遂,刪除之。
《完》