ThreatBook Agent

A guide to uninstall ThreatBook Agent from your computer

You can find on this page details on how to remove ThreatBook Agent for Windows. It is developed by Beijing ThreatBook Technology Co., Ltd. You can read more on Beijing ThreatBook Technology Co., Ltd or check for application updates here. More info about the program ThreatBook Agent can be found at https://threatbook.cn/. The program is frequently found in the C:\Program Files (x86)\Threatbook\Agent directory. Take into account that this location can vary being determined by the user's choice. C:\Program Files (x86)\Threatbook\Agent\uninst.exe is the full command line if you want to uninstall ThreatBook Agent. The program's main executable file is labeled tbAgentSrv.exe and occupies 430.28 KB (440608 bytes).

The executable files below are installed alongside ThreatBook Agent. They occupy about 4.16 MB (4364560 bytes) on disk.

• safeSrv.exe (552.28 KB)
• tbAgent.exe (488.78 KB)
• tbAgentSrv.exe (430.28 KB)
• tbCommonHelper_x64.exe (513.28 KB)
• tbGuard.exe (620.78 KB)
• tbHelper.exe (908.28 KB)
• uninst.exe (506.28 KB)
• Tbhpca.exe (242.30 KB)

...click to view all...

The information on this page is only about version 2.6.6.1300 of ThreatBook Agent. For other ThreatBook Agent versions please click below:

• 2.4.6.1700
• 2.4.0.1700
• 2.5.4.1100
• 2.4.2.1500
• 2.5.2.1200
• 2.2.6.1300
• 2.3.2.1800
• 2.2.5.1040
• 2.4.0.1500
• 2.6.3.1000
• 2.6.4.1300
• 2.2.9.1000
• 2.4.0.1450
• 2.4.2.1600
• 2.5.7.1200
• 2.1.0.2011
• 2.4.8.1200
• 2.2.9.1100
• 2.6.0.1100
• 2.4.4.1700
• 2.3.8.1400
• 2.2.5.1016

...click to view all...
When planning to uninstall ThreatBook Agent you should check if the following data is left behind on your PC.

Directories left on disk:

• C:\Program Files (x86)\Threatbook\Agent

The files below are left behind on your disk when you remove ThreatBook Agent:

• C:\Program Files (x86)\Threatbook\Agent\7z.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\AmNvLMon.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\AmNvLMon64.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\ca.dat
• C:\Program Files (x86)\Threatbook\Agent\cardinal\lb.dat
• C:\Program Files (x86)\Threatbook\Agent\cardinal\qrotload.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\RNdrCfg.dat
• C:\Program Files (x86)\Threatbook\Agent\cardinal\RNdrMonitor_x64.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\RNdrMonitor_x86.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\RpsGRdn.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\RpsGRdn64.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\RSvNrSor.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\RSvNrSor64.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\samVigiL64.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbAmsiProv.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbAmsiProv64.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbCardinal.dat
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbCardinal_Win7_X64.sys
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbCardinal_Win7_X86.sys
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbCardinal_Win8_X64.sys
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbCardinal_Win8_X86.sys
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbCardinalDll.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbcDetor64.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\Tbhpca.exe
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbIjSecBase.dll
• C:\Program Files (x86)\Threatbook\Agent\cardinal\TbIjSecBase64.dll
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\agent.common.attr
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\agent.module.attr
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\baseInfo
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\clouddetect
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\dbMgr
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\plugbase
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\PlugDisplay
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\PlugEndpointAsset
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\plugsaasedr
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\PlugSecurityBase
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\product
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\proxyInfo
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\quarantinePolicy
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\scanAuxilary
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\SoftwareCtrl
• C:\Program Files (x86)\Threatbook\Agent\data\bundle\terminal.device.info
• C:\Program Files (x86)\Threatbook\Agent\data\content\avSetting
• C:\Program Files (x86)\Threatbook\Agent\data\content\endpoint_register
• C:\Program Files (x86)\Threatbook\Agent\data\content\heliosSetting
• C:\Program Files (x86)\Threatbook\Agent\data\content\onAccessSetting
• C:\Program Files (x86)\Threatbook\Agent\data\content\popup_window
• C:\Program Files (x86)\Threatbook\Agent\data\content\tdSetting
• C:\Program Files (x86)\Threatbook\Agent\data\content\ti_collector
• C:\Program Files (x86)\Threatbook\Agent\data\content\trident
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\AUX_MISKILLING_tbagent_edr
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\AUX_QUARANTINE
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\CQData
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\crDATA
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\csDATA
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\ExcMon
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\Moneta3
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\ProtectionLog
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\Store_E0
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\Store_SDC
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\Store_SEJ0
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\swDB
• C:\Program Files (x86)\Threatbook\Agent\data\ddb\tbsfp
• C:\Program Files (x86)\Threatbook\Agent\data\gol\gateway_saas\2025080909_tbAgentSrv.exe_Master_gateway_saas_16116.log
• C:\Program Files (x86)\Threatbook\Agent\data\gol\PlugSaaSEdr\2025080911_tbAgent.exe_W0_PlugSaaSEdr_9992.log
• C:\Program Files (x86)\Threatbook\Agent\data\param\urgentHotfixParam
• C:\Program Files (x86)\Threatbook\Agent\data\PidGuidMapping.dat
• C:\Program Files (x86)\Threatbook\Agent\data\updroots.cab
• C:\Program Files (x86)\Threatbook\Agent\framework\cacert.pem
• C:\Program Files (x86)\Threatbook\Agent\framework\gateway.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\gateway_saas.dll
• C:\Program Files (x86)\Threatbook\Agent\framework\NetConfig.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\plugconf\conf.PlugDisplay.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\plugconf\conf.PlugEndpointAsset.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\plugconf\conf.Pluglc.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\plugconf\conf.PlugSaaSEdr.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\plugconf\conf.PlugSecurityBase.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\plugconf\conf.PlugSoftwareCtrl.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\plugconf\conf.PlugTrident.xml
• C:\Program Files (x86)\Threatbook\Agent\framework\strategy\agent_strategy
• C:\Program Files (x86)\Threatbook\Agent\framework\tbTrident.dll
• C:\Program Files (x86)\Threatbook\Agent\framework\tbTrident.xml
• C:\Program Files (x86)\Threatbook\Agent\general\ActionLog\ActionLog.dll
• C:\Program Files (x86)\Threatbook\Agent\general\ActionLog\ActionLog.xml
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\backup\Security-bookmark.xml
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\libevtom.dll
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\libntwom.dll
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\libpsom.dll
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\lightmi.xml
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\MICore.dll
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\providers\EvtProvider.xml
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\providers\NtwProvider.xml
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\providers\PsProvider.xml
• C:\Program Files (x86)\Threatbook\Agent\general\LightMI\Security-bookmark.xml
• C:\Program Files (x86)\Threatbook\Agent\general\nemesis.dll
• C:\Program Files (x86)\Threatbook\Agent\general\netom\Netom.dll
• C:\Program Files (x86)\Threatbook\Agent\general\Zeus.dll
• C:\Program Files (x86)\Threatbook\Agent\general\Zeus.xml
• C:\Program Files (x86)\Threatbook\Agent\Helios.dll
• C:\Program Files (x86)\Threatbook\Agent\Helios.xml

Frequently the following registry keys will not be uninstalled:

• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TBAgent

Additional registry values that are not removed:

• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\safeSrv\ImagePath
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tbAgentSrv\ImagePath
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tbGuardSrv\ImagePath

How to delete ThreatBook Agent with the help of Advanced Uninstaller PRO

ThreatBook Agent is an application by the software company Beijing ThreatBook Technology Co., Ltd. Sometimes, people choose to remove this application. Sometimes this is difficult because doing this manually takes some advanced knowledge regarding removing Windows applications by hand. The best QUICK manner to remove ThreatBook Agent is to use Advanced Uninstaller PRO. Here are some detailed instructions about how to do this:





1. If you don't have Advanced Uninstaller PRO already installed on your PC, install it. This is a good step because Advanced Uninstaller PRO is an efficient uninstaller and general tool to clean your PC.

DOWNLOAD NOW

• navigate to Download Link
• download the program by pressing the DOWNLOAD NOW button
• install Advanced Uninstaller PRO

2. Run Advanced Uninstaller PRO. It's recommended to take your time to get familiar with the program's design and wealth of tools available. Advanced Uninstaller PRO is a powerful system utility.

3. Click on the General Tools button


4. Press the Uninstall Programs button


5. A list of the programs existing on the computer will be shown to you

6. Navigate the list of programs until you find ThreatBook Agent or simply click the Search field and type in "ThreatBook Agent". If it is installed on your PC the ThreatBook Agent application will be found automatically. Notice that when you click ThreatBook Agent in the list of programs, the following information about the program is shown to you:

• Safety rating (in the left lower corner). This explains the opinion other users have about ThreatBook Agent, from "Highly recommended" to "Very dangerous".
• Reviews by other users - Click on the Read reviews button.
• Technical information about the app you are about to remove, by pressing the Properties button.

For instance you can see that for ThreatBook Agent:

• The software company is: https://threatbook.cn/
• The uninstall string is: C:\Program Files (x86)\Threatbook\Agent\uninst.exe

7. Press the Uninstall button. A window asking you to confirm will show up. Confirm the removal by pressing Uninstall. Advanced Uninstaller PRO will automatically uninstall ThreatBook Agent.


8. After uninstalling ThreatBook Agent, Advanced Uninstaller PRO will ask you to run a cleanup. Click Next to perform the cleanup. All the items that belong ThreatBook Agent which have been left behind will be detected and you will be able to delete them. By uninstalling ThreatBook Agent using Advanced Uninstaller PRO, you are assured that no registry entries, files or folders are left behind on your PC.

Your computer will remain clean, speedy and able to run without errors or problems.

Disclaimer

This page is not a piece of advice to uninstall ThreatBook Agent by Beijing ThreatBook Technology Co., Ltd from your computer, nor are we saying that ThreatBook Agent by Beijing ThreatBook Technology Co., Ltd is not a good software application. This text simply contains detailed instructions on how to uninstall ThreatBook Agent in case you decide this is what you want to do. Here you can find registry and disk entries that Advanced Uninstaller PRO discovered and classified as "leftovers" on other users' PCs.