This procedure involves the following three steps:

• Stop Symantec AntiVirus services
• Remove AMS server from the registry
• Remove AMS server from the Start menu and the hard drive

Make sure that the AMS configuration window is not currently open.


Stop Symantec AntiVirus services
Stop the following services before you remove items from the registry, Start menu, or hard drive. Not all services are present on all computers that run AMS server. If you do not see a service, skip to the next service in the list:

• Intel PDS
• Intel Alert Handler
• Intel Alert Originator
• Intel File Transfer
• Symantec AntiVirus
• Symantec AntiVirus Definition Watcher

To stop the services

1. On the Windows taskbar, click Start > Run.
2. In the Open box, type the following text:
   
   services.msc
   
   
3. Click OK.
4. For each of the following services, right-click the name of the service, and then click Stop:
   • Intel PDS
   • Intel Alert Handler
   • Intel Alert Originator
   • Intel File Transfer
   • Symantec AntiVirus
   • Symantec AntiVirus Definition Watcher

Remove AMS server from the registry
Most of the items that you must remove are entries in the Windows registry.

---

Note: You must have administrator permissions (read and write) to edit the registry.

---

To remove AMS server from the registry

1. On the Windows taskbar, click Start > Run.
2. In the Open box, type the following text:
   
   regedit
   
   
3. Click OK.
4. In the Windows registry editor, in the left pane, delete the following key:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\AMS2
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Intel Alert Handler
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Intel Alert Originator
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Intel File Transfer
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Intel Alert Handler
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Intel Alert Originator
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Intel File Transfer
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Intel Alert Handler
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Intel Alert Originator
   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Intel File Transfer
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Intel Alert Handler
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Intel Alert Originator
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Intel File Transfer
   
   Note: Normally only two of the ControlSet00x will be found, e.g. ControlSet001 and ControlSet003.
   
   
5. In the left pane, click My Computer.
6. On the Edit menu, click Find.
7. In the Find what box, type the following text string:
   
   F652A84DB82EC9748AA6E67C65B31D6B
   
   
8. Click Find Next.
   Delete all keys and values that contain this string.
9. Repeat steps 5-8 for the following strings:
   • Bcsthndl.dll
   • Hndlrsvc.exe
   • Iao.exe
   • Itmlhndl.dll
   • Msbxhndl.dll
   • Ntelhndl.dll
   • Origreg.dll
   • Pagehndl.dll
   • Prgxhndl.dll
     
     

     ---

     WARNING: Follow the next step only if the condition that is described in the step is met. If you delete a registry key that another Symantec product uses, that product must be removed and installed again.
     

     ---

     
     
10. If no other Symantec programs that use virus definitions are installed, delete the following key:
    
    HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs
    
    
11. Go to the following key:
    
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps
    
    
12. In the right pane, delete the following value:
    
    AMS_INST_PATH
    
    
13. Delete the following key:
    
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF65827B-E28C-4b27-A613-8D51421FD6FF}
    
    
14. Go to the following key:
    
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
    
    
15. In the right pane, delete the following values:
    • :\Program Files\Symantec\Symantec System Center\AMS2\
    • :\Program Files\Symantec\Symantec System Center\\AMS2\Winnt
    • :\Program Files\Symantec\Symantec System Center\Langs\Enu\AMS2NT
    • :\Documents and Settings\All Users\Start Menu\Programs\Alert Management Server\
      
16. Restart the computer.
    

Remove AMS server from the Start menu and the hard drive
After AMS server is disabled, all that remains is to remove leftover files and shortcuts to the program.

To remove AMS server from the Start menu

1. On the Windows taskbar, right-click Start, and then click Open All Users.
2. Double-click Programs.
3. Right-click Alert Management Server, and then click Delete.

To remove AMS server from the hard drive

1. On the Windows taskbar, click Start > Programs > Accessories > Windows Explorer.
2. Open the following folder:
   
   :\Program Files\Symantec\Symantec System Center
   
   
3. Delete the following files:
   • AMSAdmin
   • Amscust.dll
     
4. Delete the AMS2 folder.
5. Open the following folder:
   
   :\Windows\System32
   
   
6. Delete the AMS_II folder.
7. Exit Windows Explorer.