Manually uninstalling the Symantec Client Security 3.0 server

Article:TECH101264  |  Created: 2005-01-02  |  Updated: 2010-08-13  |  Article URL http://www.symantec.com/docs/TECH101264
Article Type
Technical Solution


Environment

Issue




This document describes how to manually uninstall the Symantec Client Security 3.0 server from Windows 2000, XP, or 2003.


Solution



 


Before you begin: If if you have not backed up the pki structure of the server, you should back it up before removing Symantec AntiVirus. To back up the pki structure, read the document Steps to minimize recovery time in the event of a server failure.




Removing Symantec Client Security client manually takes the following three basic steps:

  • Stop Symantec AntiVirus services
  • Remove Symantec Client Security from the registry
  • Remove Symantec Client Security from the Start menu and the hard drive


Ensure that the Symantec Client Security is not currently running.


Stop Symantec Client Security services
Stop the following services before removing items from the registry, Start menu, or hard drive.

  • Intel PDS
  • Symantec AntiVirus
  • Symantec AntiVirus Definition Watcher
  • Symantec Event Manager
  • Symantec Settings Manager


To stop the services

  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    services.msc
  3. Click OK.
  4. For each of the services listed above, right-click the name of the service, and click Stop.



Remove Symantec Client Security from the registry
Most of the items you must remove are entries in the Windows registry.


Note: You must have administrator permissions (read and write) to edit the registry.


 


WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.
For instructions, see How to back up the Windows registry.




To remove Symantec Client Security from the registry

  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    regedit
  3. Click OK.
  4. In the Windows Registry Editor, in the left pane, go to the following key:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
  5. In the left pane, right-click LDVPMenu, and then click Delete.
  6. Delete the following keys:
    • HKEY_CLASSES_ROOT\Installer\Features\7403AF9E51B091E458ECEEF76C6EF099
    • HKEY_CLASSES_ROOT\Installer\Products\7403AF9E51B091E458ECEEF76C6EF099
    • HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage\VP6
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7403AF9E51B091E458ECEEF76C6EF099
    • HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SPBBC
    • HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec AntiVirus
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\System\SAVRT
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lanmanserver\Shares\Security\VPHOME
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lanmanserver\Shares\Security\VPLOGON
  7. Expand the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

    This key contains many <Package Code> keys.

  8. Click each <Package Code> key, and look in the right pane for references to Symantec Client Security.
    If you see any references to Symantec Client Security in the right pane, then delete the entire
    <Package Code> key.
  9. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps
  10. In the right pane, delete the following values:
    • AMSUsageCount
    • AVENGEDEFS
    • Common Client
    • Common Client Data
    • Common Client Decomposers
    • NAVNT
    • SCS Install Directory
    • SAVCE
    • SPBBC
    • Symantec Shared Directory
    • VP6ClientInstalled
    • VP6UsageCount
  11. Go to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
  12. Delete the following keys:
    • ccEvtMgr
    • ccPwdSvc
    • ccSetMgr
    • DefWatch
    • NAVENG
    • NAVEX15
    • SAVRT
    • SAVRTPEL
    • SPBBCDrv
    • SPBBCSvc
    • Symantec AntiVirus
  13. Go to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
  14. Delete the following keys:
    • DefWatch
    • Symantec AntiVirus
    • SPBBCSvc
    • ccEvtMgr
    • ccSetMgr
  15. In the left pane, click My Computer. On the Edit menu, click Find. Search for the following text:

    VirusProtect6

    Delete all keys and values that contain this string.
  16. In the left pane, click My Computer. On the Edit menu, click Find. Search for the following text:

    E761730C408BDBC4D825D7A248EB45F3

    Delete all keys and values that contain this string.


    WARNING: Follow the next four steps only if the conditions described in the steps are met. These instructions affect registry entries that are used by other Symantec products. If you delete a key or value that is used by another Symantec product, that product must be removed and installed again.

  17. If no other Symantec application that use virus definitions are installed, go to the HKEY_LOCAL_MACHINE\Software\Symantec key and delete the following key:

    SharedDefs
  18. If Symantec Client Security is the only Symantec program installed, delete the following keys:
    • Common Client
    • SymEvent
  19. If Symantec Client Security is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services and delete the SymEvent key.
  20. If Symantec Client Security is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the ccApp value.
  21. If Symantec Client Security is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the vptray value.
  22. Restart the computer.


Symantec Client Security server is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.


Remove Symantec Client Security from the Start menu and the hard drive
After Symantec Client Security is disabled, all that remains is to remove leftover files and shortcuts to the program.

To remove Symantec Client Security Server from the Start menu

  1. Right-click Start, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click Symantec Client Security, and then click Delete.
  4. Close Windows Explorer.


To remove Symantec Client Security Server from the hard drive

  1. Click Start > Programs > Accessories > Windows Explorer.
  2. Go to the Program Files folder, right-click Symantec AntiVirus, and then click Delete.


    WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect files and folders that are used by other Symantec products. If you delete a file or folder that is used by another Symantec product, that product must be removed and installed again.

  3. If Symantec Client Security is the only Symantec product on your computer, delete the Symantec folder.
  4. Go to the Program Files\Common Files\Symantec Shared folder.
  5. If Symantec Client Security is the only Symantec product on your computer, delete the VirusDefs folder.
  6. If Symantec Client Security is the only Symantec product on your computer, delete the SSC folder.
  7. Go to C:\Documents and Settings\All Users\Application Data\Symantec\.
  8. Delete the following folders:
    • Symantec AntiVirus Corporate Edition
    • Common Client
  9. Exit Windows Explorer.






Legacy ID



2005050211082448


Article URL http://www.symantec.com/docs/TECH101264


Terms of use for this information are found in Legal Notices