Manually uninstalling Symantec Client Security 2.0 from Windows NT/2000/XP/2003

Article:TECH100620  |  Created: 2004-01-08  |  Updated: 2006-01-31  |  Article URL http://www.symantec.com/docs/TECH100620
Article Type
Technical Solution


Environment

Issue



Using Add or Remove Programs has failed, and you need to know how to manually uninstall Symantec Client Security 2.0 from Windows NT, 2000, XP, or 2003.


Solution




Before you begin:
This document describes the process to uninstall Symantec Client Security 2.0 manually. This includes both Symantec AntiVirus Corporate Edition 9.0 and Symantec Client Firewall 7.1. To uninstall just Symantec AntiVirus Corporate Edition 9.0, read the document Manually uninstalling the Symantec AntiVirus Corporate Edition 9.0 client from Windows NT/2000/XP/2003.

Removing Symantec AntiVirus manually comprises the following four basic steps:
  • Stop Symantec Client Security services
  • Remove Symantec Client Security from the registry
  • Remove Symantec Client Security from the Start menu
  • Remove Symantec Client Security from the hard drive

Stop Symantec Client Security services
Stop the following services before removing items from the registry, Start menu, or hard drive:
  • SAVRoam
  • Symantec AntiVirus Definition Watcher
  • Symantec Client Firewall Configuration
  • Symantec Event Manager
  • Symantec Network Drivers Services
  • Symantec Network Proxy
  • Symantec Password Validation
  • Symantec SecurePort
  • Symantec Settings Manager
  • Symantec AntiVirus
  • Intel Alert Handler
  • Intel Alert Originator
  • Intel File Transfer
  • Intel PDS


Remove Symantec Client Security from the registry

Note: You must have administrator permissions (read and write) to edit the registry.


WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.
For instructions, see How to back up the Windows registry.


To edit the registry

  1. In the left pane, go to the following key:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers

  2. Right-click the LDVPMenu entry, and then click Delete.
  3. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec

  4. Delete the following keys:
    • CCPD
    • Common Client
    • LiveUpdate
    • Managed Products
    • Shared Technology
    • SharedDefs
    • Symantec AntiVirus
    • Symevent
    • SymNetDrv
  5. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps

  6. Delete the following entries:
    • VP6ClientInstalled
    • VP6UsageCount
    • AdBlocking
    • AVENGEDEFS
    • Common Client
    • Common Client Data
    • Common Client Decomposers
    • ConfigWizard
    • IDSDefs
    • Internet Security
    • Internet Security Data
    • SAVCE
    • SCS Install Directory
    • Symantec Shared Directory
    • SymNetDrv
  7. Go to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services

  8. Delete the following keys:
    • ccEvtMgr
    • ccProxy
    • ccPwdSvc
    • ccSetMgr
    • CfgWzSvc
    • DefWatch
    • NAVENG
    • NAVEX15
    • SavRoam
    • SAVRT
    • SAVRTPEL
    • SNDSrvc
    • Symantec AntiVirus
    • SymEvent
    • SYMREDRV
    • SymSecurePort
    • SYMTDI
  9. Go to any existing ControlSet\Services keys, and delete the same entries as in the previous step.
  10. If Symantec Client Security is the only Symantec program installed, delete the SymEvent keys.
  11. Go to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application

  12. Delete the following entries:
    • Defwatch
    • ccEvtMgr
    • ccProxy
    • ccSetMgr
    • LiveUpdate
    • SavRoam
    • Symantec AntiVirus
  13. Go to the following key in the left pane:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System

  14. Delete the SAVRT entry.
  15. Go to any existing ControlSet\Services\EventLog\Application and ControlSet\Services\EventLog\System keys and delete the same entries as in steps 12-14.
  16. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage

  17. Delete the VP6 key.

    WARNING: Be careful not to delete the Intel folder, since other programs or hardware might be using this key.
  18. In the left pane, highlight "My Computer", and then click Edit > Find. Search for "VirusProtect6" and delete all instances of this string.
  19. In the left pane, highlight "My Computer", and then click Edit > Find. Search for 3B27DC00FD2ECFD4CB1CC54C5F4615D8. Delete all instances of this string.

    WARNING: Follow the next two steps only if no other Symantec programs use virus definitions on the computer. If there are programs using virus definitions when the SharedDefs key is deleted, they will have to be uninstalled and reinstalled in order to function.
  20. If no other Symantec programs that use virus definitions are installed, go to the following key. Otherwise, go to step 22:

    HKEY_LOCAL_MACHINE\Software\Symantec

  21. Delete the SharedDefs entry.
  22. Expand the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

    This key contains many keys.

  23. Click each key, and look in the right pane for references to Symantec AntiVirus or to Symantec Client Security.
    If you see any references to Symantec AntiVirus or to Symantec Client Security in the right pane, then delete the entire key.
  24. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

  25. Delete the vptray key.
  26. Restart the computer.

Symantec Client Security is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.

Remove Symantec Client Security from the Start menu
  1. Right-click the Start button, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click the Symantec Client Security folder, and then click Delete.


Remove Symantec Client Security from the hard drive
  1. In Windows Explorer, go to the \Program Files folder.
  2. Delete the Symantec Client Security folder.

    WARNING: Follow the next three steps only if Symantec Client Security is the only Symantec program installed. If the VirusDefs folder is deleted while there are other Symantec programs using virus definitions, they must be uninstalled and reinstalled in order for them to function.
  3. If Symantec Client Security is the only Symantec product on your computer, delete the Symantec folder.
  4. Go to the Program Files\Common Files\Symantec Shared folder.
  5. If SCS is the only Symantec product on your computer, delete the VirusDefs folder.
  6. Go to the folder C:\Documents and Settings\All Users\Application Data\Symantec\.
  7. Delete the Symantec AntiVirus Corporate Edition folder.
  8. Close Windows Explorer.






Legacy ID



2004040815371048


Article URL http://www.symantec.com/docs/TECH100620


Terms of use for this information are found in Legal Notices