Manual removal of the Symantec AntiVirus client manually involves the following three basic steps:

• Stop Symantec AntiVirus services and processes
• Remove Symantec AntiVirus from the registry
• Remove Symantec AntiVirus from the Start menu and the hard drive

Stop Symantec AntiVirus services and processes
Ensure that the Symantec AntiVirus window is not open and is not currently running.

To stop the services

1. On the Windows Taskbar, click Start > Run.
2. In the Open box, type the following text:
   
   services.msc
   
3. Click OK.
4. For each of the following services, right-click the name of the service, and click Stop:
   • SAVRoam
   • Symantec AntiVirus
   • Symantec AntiVirus Definition Watcher
   • Symantec Event Manager
   • Symantec Settings Manager

To stop the processes

1. Press Ctrl+Alt+Del.
2. Click Task Manager.
3. In Windows Task Manager, on the Processes tab, right-click the name of the service, and click End Process, for each of the following processes:
   • ccApp.exe
   • VPTray.exe
4. Close the Windows Task Manager.

Remove Symantec AntiVirus from the registry
Most of the items that you must remove are entries in the Windows registry.

Note: You must have administrator permissions (read and write) to edit the registry.

WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.
For instructions, see How to back up the Windows registry.

To remove Symantec AntiVirus from the registry

1. On the Windows taskbar, click Start > Run.
2. In the Open box, type the following text:
   
   regedit
   
3. Click OK.
4. In the Windows Registry Editor, in the left pane, go to the following key:
   
   HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
   
5. In the left pane, right-click LDVPMenu, and then click Delete.
6. Go to the following key:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Symantec
   
7. Delete the following keys:
   • SPBBC
   • Symantec AntiVirus
   • SymNetDrv
     
8. Delete all of the following registry keys that exist:
   • HKEY_CLASSES_ROOT\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D
   • HKEY_CLASSES_ROOT\Installer\Features\0DE336A57D5E56D4BAD835DE34152048
   • HKEY_CLASSES_ROOT\Installer\Products\0DE336A57D5E56D4BAD835DE34152048
   • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D
   • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\0DE336A57D5E56D4BAD835DE34152048
   • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\0DE336A57D5E56D4BAD835DE34152048
   • HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage\VP6
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0DE336A57D5E56D4BAD835DE34152048
   • 
     
9. Expand the following key:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
   
   This key contains many <Package Code> keys.
   
   
10. Click each <Package Code> key, and look in the right pane for references to Symantec AntiVirus.
    If you see any references to Symantec AntiVirus in the right pane, then delete the entire <Package Code> key.
    
11. Go to the following key:
    
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps
    
12. Delete the following values:
    • AVENGEDEFS
    • Common Client
    • Common Client Data
    • Common Client Decomposers
    • NAVNT
    • SAV Install Directory
    • SAVCE
    • SPBBC
    • SymNetDrv
    • VP6ClientInstalled
    • VP6UsageCount
      
13. Go to the following key:
    
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
    
14. Delete the following keys:
    • ccEvtMgr
    • ccSetMgr
    • ccPwdSvc
    • DefWatch
    • NAVENG
    • NAVEX15
    • SavRoam
    • SAVRT
    • SAVRTPEL
    • SNDSrvc
    • SPBBCDrv
    • SPBBCSvc
    • Symantec AntiVirus
    • SYMREDRV
    • SYMTDI
      
15. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the same entries as under CurrentControlSet\Services above.
16. Go to the following key:
    
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
    
17. Delete the following entries:
    • Defwatch
    • ccEvtMgr
    • ccProxy
    • ccSetMgr
    • LiveUpdate
    • SavRoam
    • Symantec AntiVirus
      
18. Go to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System, and delete the SAVRT key.
19. Go to any existing "ControlSet*"\Services\EventLog\Application and "ControlSet*"\Services\EventLog\System keys and delete the same entries like in the previous four steps.
20. In the left pane, click My Computer.
21. On the Edit menu, click Find.
22. Search for VirusProtect6.
    Delete all keys and values that contain this string.
23. In the left pane, click My Computer.
24. On the Edit menu, click Find.
25. Search for 0DE336A57D5E56D4BAD835DE34152048.
    Delete all keys and values that contain this string.
    
    

    ---

    WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect registry entries that are used by other Symantec products. If you delete a key or value that is used by another Symantec product, that product must be removed and installed again.
    

    ---

26. If no other Symantec applications that use virus definitions are installed, go to the following key:
    
    HKEY_LOCAL_MACHINE\Software\Symantec
    
27. Delete the SharedDefs value.
28. If Symantec AntiVirus is the only Symantec program installed, delete the following keys:
    • Common Client
    • SymEvent
      
29. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the ccApp value.
30. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the vptray value.
31. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services, and delete the SymEvent key.
32. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the SymEvent keys.
33. Restart the computer.

Symantec AntiVirus is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.


Remove Symantec AntiVirus from the Start menu and the hard drive
After Symantec AntiVirus is disabled, all that remains is to remove leftover files and shortcuts to the program.

To remove Symantec AntiVirus from the Start menu

1. On the Windows taskbar, right-click Start, and then click Open All Users.
2. Double-click Programs.
3. Right-click Symantec AntiVirus, and then click Delete.

To remove Symantec AntiVirus from the hard drive

1. On the Windows taskbar, click Start > Programs > Windows Explorer.
2. Open the Program Files folder.
3. Right-click Symantec AntiVirus, and then click Delete.
   
   

   ---

   WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect files and folders that are used by other Symantec products. If you delete a file or folder that is used by another Symantec product, that product must be removed and installed again.
   

   ---

4. If Symantec AntiVirus is the only Symantec product on your computer, delete the Symantec folder.
5. Open the following folder:
   
   Program Files\Common Files\Symantec Shared
   
6. If Symantec AntiVirus is the only Symantec product on your computer, delete the following folders:
   • Decomposers
   • SPBBC
   • SPManifests
   • SSC
   • VirusDefs
     
7. Go to the following folder:
   
   C:\Documents and Settings\All Users\Application Data\Symantec
   
8. Delete the following folders:
   • Symantec AntiVirus Corporate Edition
   • Common Client
     
9. Exit Windows Explorer.