在公司，給我的mac 筆電裝了公司的查殺毒軟件，此后，這貨就像揮之不去的病毒，就像你心理上陰影一樣如影隨形，最鄰人方案的是這貨沒界面，只是個后台服務，一般人就沒辦法了。最最令人反感的是它經常控制/拖慢網速，最最最令人反感的是它經常控制我的行為——不讓我破解軟件！
好吧，你既然這么難纏，是個老大難，就是卸載了你。但是趨勢的東西卸載都要密碼！要不就是卸載工具和安裝包在一起，且安裝以后是沒有卸載入口的！好吧，請教度娘：給的方案都是win下的刪除注冊表，我倒 (⊙o⊙)…，什么？沒有mac方案？我倒。。。好不容易找到mac下的解決辦法，點進去一看：是趨勢科技的官網給的解決方案：說了一堆天書般的，聖經般的沒用的東東。
哎，自力根生吧。突然想到：Linux/nunix系列是沒有注冊表之說的，自立根生沒問題的，完全可以自己卸載。
來來來，先看看，這貨的日常：
這貨就點哪個都不出現窗口/界面。下面是鼠標懸浮時的窗口：
給我們的有用信息是【Trend Micro】 ，整個磁盤查找都沒有半點文件的跡象。。。
於是，找到進程，雙擊查看進程，點擊取樣，可得到如下：
cwd / txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/MacOS/UIMgmt txt /Library/Frameworks/TMAppCore.framework/Versions/A/TMAppCore txt /Library/Frameworks/TMAppCommon.framework/Versions/A/TMAppCommon txt /Library/Application Support/TrendMicro/common/lib/libTmLog.dylib txt /Library/Application Support/TrendMicro/common/lib/libTmUtil.dylib txt /usr/lib/dyld txt /Library/Frameworks/iCoreClient.framework/Versions/A/iCoreClient txt /Library/Application Support/TrendMicro/common/lib/libprotobuf-lite.dylib txt /Library/Frameworks/iCoreClientPb.framework/Versions/A/iCoreClientPb txt /System/Library/CoreServices/Encodings/libSimplifiedChineseConverter.dylib txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/Assets.car txt /private/var/folders/6z/hby371v12319h_64sn6n41qm0000gn/C/com.apple.IntlDataCache.le.kbdx txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/en.lproj/popupBG_RTS.png txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/popup_bt_off.png txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/en.lproj/popupBG_UgdReboot.png txt /usr/share/icu/icudt57l.dat txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/SystemAppearance.car txt /System/Library/Fonts/SFNSText.ttf txt /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/AppleKeyboardLayouts-L.dat txt /private/var/folders/6z/hby371v12319h_64sn6n41qm0000gn/0/com.apple.LaunchServices-175-v2.csstore txt /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/Extras2.rsrc txt /System/Library/Fonts/Helvetica.dfont txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/TMCCMac.icns txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/tball_normal.png txt /Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/Resources/tball_offline.png txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/VibrantLightAppearance.car txt /System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/FunctionRowAppearance.car txt /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/HIToolbox.rsrc txt /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/Localized.rsrc txt /Library/ScriptingAdditions/BartenderHelper.osax/Contents/MacOS/BartenderHelper txt /Applications/Bartender 2.app/Contents/Resources/BartenderHelperTwoOneThree.bundle/Contents/MacOS/BartenderHelperTwoOneThree txt /System/Library/Fonts/SFNSDisplay.ttf txt /System/Library/Fonts/Keyboard.ttf txt /private/var/db/dyld/dyld_shared_cache_i386 txt /Library/Frameworks/TMGUIUtil.framework/Versions/A/TMGUIUtil 0 /dev/null 1 /dev/null 2 /dev/null 3 /private/var/log/TrendMicro/TmccCore/iCoreClientPb.log 4 /private/var/log/TrendMicro/TmccCore/iCoreClient.log 5 /Users/HFB/Library/Logs/TrendMicro/Debug/Application/UIMgmt.log 6 /private/var/log/TrendMicro/TmccCore/iFrameWork.log 7 ->0xbce5551b6e807ed 8 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/Extras2.rsrc 10 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/HIToolbox.rsrc 11 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/Localized.rsrc
看，有好多有關這貨的資源調用我們得一個一個分析，若是系統的則略過，若是這個貨的則先把文件/文件夾打個壓縮包作為備份（等最后分析出那個該刪哪個不該刪，不該刪的還原就好），再把源文件刪除。重啟電腦。這貨是隨機啟動的，重啟就知道卸載好了沒。
最后知道哪個該刪哪個不該刪，不該刪的還原就好。
先把子進程和父進程殺掉。
。。。
經過幾小時的浴血奮戰終於真相大白：
1》這貨的安裝目錄是：/Library/Application Support/TrendMicro
2》這貨的日志目錄是：/private/var/log/TrendMicro和/Users/HFB/Library/Logs/TrendMicro
哈哈，遂，刪除之。
《完》