Manually uninstalling AMS server for Symantec AntiVirus Corporate Edition 10.1 or Symantec Client Security 3.1 from Windows

Article:TECH101722  |  Created: 2006-01-06  |  Updated: 2009-01-05  |  Article URL http://www.symantec.com/docs/TECH101722
Article Type
Technical Solution

Product(s)

Environment

Issue



This document describes how to manually uninstall AMS server for Symantec AntiVirus Corporate Edition 10.1 or Symantec Client Security 3.1 from Windows 2003/XP/2000.

Symptoms
Manually uninstalling AMS server for Symantec AntiVirus Corporate Edition 10.1 or Symantec Client Security 3.1 from Windows This document describes how to manually uninstall AMS server for Symantec AntiVirus Corporate Edition 10.1 or Symantec Client Security 3.1 from Windows 2003/XP/2000.



Solution



This procedure involves the following three steps:
  • Stop Symantec AntiVirus services
  • Remove AMS server from the registry
  • Remove AMS server from the Start menu and the hard drive

Make sure that the AMS configuration window is not currently open.


Stop Symantec AntiVirus services
Stop the following services before you remove items from the registry, Start menu, or hard drive. Not all services are present on all computers that run AMS server. If you do not see a service, skip to the next service in the list:
  • Intel PDS
  • Intel Alert Handler
  • Intel Alert Originator
  • Intel File Transfer
  • Symantec AntiVirus
  • Symantec AntiVirus Definition Watcher

To stop the services
  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    services.msc

  3. Click OK.
  4. For each of the following services, right-click the name of the service, and then click Stop:
    • Intel PDS
    • Intel Alert Handler
    • Intel Alert Originator
    • Intel File Transfer
    • Symantec AntiVirus
    • Symantec AntiVirus Definition Watcher


Remove AMS server from the registry
Most of the items that you must remove are entries in the Windows registry.


Note: You must have administrator permissions (read and write) to edit the registry.



To remove AMS server from the registry
  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    regedit

  3. Click OK.
  4. In the Windows registry editor, in the left pane, delete the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\AMS2
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Intel Alert Handler
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Intel Alert Originator
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Intel File Transfer
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Intel Alert Handler
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Intel Alert Originator
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Intel File Transfer
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Intel Alert Handler
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Intel Alert Originator
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Intel File Transfer
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Intel Alert Handler
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Intel Alert Originator
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Intel File Transfer

    Note: Normally only two of the ControlSet00x will be found, e.g. ControlSet001 and ControlSet003.

  5. In the left pane, click My Computer.
  6. On the Edit menu, click Find.
  7. In the Find what box, type the following text string:

    F652A84DB82EC9748AA6E67C65B31D6B

  8. Click Find Next.
    Delete all keys and values that contain this string.
  9. Repeat steps 5-8 for the following strings:
    • Bcsthndl.dll
    • Hndlrsvc.exe
    • Iao.exe
    • Itmlhndl.dll
    • Msbxhndl.dll
    • Ntelhndl.dll
    • Origreg.dll
    • Pagehndl.dll
    • Prgxhndl.dll


      WARNING: Follow the next step only if the condition that is described in the step is met. If you delete a registry key that another Symantec product uses, that product must be removed and installed again.


  10. If no other Symantec programs that use virus definitions are installed, delete the following key:

    HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs

  11. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps

  12. In the right pane, delete the following value:

    AMS_INST_PATH

  13. Delete the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF65827B-E28C-4b27-A613-8D51421FD6FF}

  14. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

  15. In the right pane, delete the following values:
    • :\Program Files\Symantec\Symantec System Center\AMS2\
    • :\Program Files\Symantec\Symantec System Center\\AMS2\Winnt
    • :\Program Files\Symantec\Symantec System Center\Langs\Enu\AMS2NT
    • :\Documents and Settings\All Users\Start Menu\Programs\Alert Management Server\
  16. Restart the computer.

Remove AMS server from the Start menu and the hard drive
After AMS server is disabled, all that remains is to remove leftover files and shortcuts to the program.

To remove AMS server from the Start menu
  1. On the Windows taskbar, right-click Start, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click Alert Management Server, and then click Delete.

To remove AMS server from the hard drive
  1. On the Windows taskbar, click Start > Programs > Accessories > Windows Explorer.
  2. Open the following folder:

    :\Program Files\Symantec\Symantec System Center

  3. Delete the following files:
    • AMSAdmin
    • Amscust.dll
  4. Delete the AMS2 folder.
  5. Open the following folder:

    :\Windows\System32

  6. Delete the AMS_II folder.
  7. Exit Windows Explorer.







Legacy ID



2006030613294348


Article URL http://www.symantec.com/docs/TECH101722


Terms of use for this information are found in Legal Notices