Removing Symantec Mail Security 7.0 for Microsoft Exchange after Add or Remove Programs does not work

Article:TECH200443  |  Created: 2012-12-03  |  Updated: 2014-02-10  |  Article URL http://www.symantec.com/docs/TECH200443
Article Type
Technical Solution


Issue



 Instructions to manually remove the components of Symantec Mail Security for Microsoft Exchange 7.0 after Add or Remove programs does not work.


Solution



 WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified. 


The following document explains how to back up the registry:
How to back up, edit, and restore the registry in Windows 7 and Windows Server 2008

 

1.  Stop Services.

Open a command prompt and enter the following commands:

 

net stop smsmse

net stop SAVFMSESpamStatsManager

net stop “Symantec Mail Security Management Service”

sc delete smsmse

sc delete SAVFMSESpamStatsManager

sc delete “Symantec Mail Security Management Service”

 

 2. Unregister SMSMSE from LiveUpdate:

Open a command prompt on the computer where SMSMSE is installed and run the following command:

32-bit OS: regsvr32.exe /u "C:\Program Files\Symantec\SMSMSE\<version>\Server\SAVFMSELU.dll"
64-bit OS: regsvr32.exe /u "C:\Program Files (x86)\Symantec\SMSMSE\<version>\Server\SAVFMSELU.dll"

NOTE: Change the value of <version> to the appropriate version of SMSMSE installed.  The following is an example for SMSMSE 7.0 on a 64-bit OS:

regsvr32.exe /u "C:\Program Files (x86)\Symantec\SMSMSE\7.0\Server\SAVFMSELU.dll"

3. Remove Symantec Mail Security for Microsoft Exchange Web site in Internet Services Manager.

    1. Open Start > Administrative Tools >Computer Management.
    2. Navigate to Services and Applications > Internet Information Services
    3. On the right hand side menu expand Server Name > Sites.
    4. Right click Symantec Mail Security for Microsoft Exchange and select Remove.
    5. On the right hand side menu expand Server Name > Application Pools.
    6. Right click on SMSMSEAppPool and select Remove.
    7. Open a command prompt and enter the following commands: 

iisreset

4. Remove registry keys.

a. Exit all programs.
b. Open regedit and remove the following folders if they are present:

 HKEY_CLASSES_ROOT\Installer\Products\1FACAE25DEDE489499F8784B63A2F050

HKEY_CLASSES_ROOT\Installer\Products\633B31E244868FB42853A2DCE92AD3CA

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\1FACAE25DEDE489499F8784B63A2F050

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\633B31E244868FB42853A2DCE92AD3CA

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{52EACAF1-EDED-4984-998F-87B4362A0F05}

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Cmaf

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps\SMSMSE7.0

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps\SMSVersionSupport

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps\SymcData-virusdefs32

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\SharedDefs\SymcData-virusdefs32

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\SMSMSE

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\SMSMSESPC

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\SMSMSEPERF

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Symantec Mail Security for Microsoft Exchange

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Symantec Mail Security Managed Components

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Symantec Mail Security Management Service

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\VirusScan

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVFMSESpamStatsManager

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SMSMSE

 

Note: You should also verify the enumerated control set entries for SMSMSE services.  e.g. CurrentControlSet001, CurrentControlSet002..

 5. Remove Exchange Transport Agents (if on a HUB server).

a. Open the Exchange Management Shell and enter the following commands:

Uninstall-Transportagent -identity "SMSMSESMTPAgent"
Uninstall-TransportAgent -identity "SMSMSERoutingAgent"
Restart-Service MSExchangeTransport

 

6. Remove file system folders.

            C:\ProgramData\Symantec\Definitions\SymcData\virusdefs32 (Windows 2008 only)
            C:\Program Files (x86)\Common Files\Symantec Shared\definitions
            C:\Program Files (x86)\Common Files\Symantec Shared\SymcData\virusdefs32 (Windows 2003 only)
            C:\Program Files (x86)\Symantec\SMSMSE
            c:\Program Files (x86)\Symantec\CMaF


            NOTE: These paths are the default locations; adjust the paths if you installed the program into a different location.    
            

7. Delete Administration Console icon from desktop.

Remove Rights from domain user account on Exchange 2010/2013


When you install SMSMSE 7.0 on Microsoft Exchange Server 2010/2013, the service account specified during installation is granted ApplicationImpersonation and LogonAsService rights. These rights are not removed when you uninstall SMSMSE 7.0 . Removing these rights is optional but recommended if you do not plan to run SMSMSE in your network with this user account.

WARNING: Do not remove the rights given to this user if the same user is being used on other Exchange servers in the same domain.


1. Click Start > All Programs >Microsoft Exchange Server 2010 > Exchange Management Shell. It may take a few moments for a prompt to appear.
2. At the prompt, type the following, and then press Enter:

remove-ManagementRoleAssignment SMSMSE_RBAC_<domain\username>


where <domain\username> is the correct domain and user name.


3. Press Y at the confirmation prompt and then press Enter.
4. Click Start > Administrative Tools > Local Security Policy
5. In the left pane, expand Local Policies and click User Rights Assignment.
6. In the right pane, double-click Log on as a service.
7. On the Local Security Setting tab, click the correct user name.
8. Click the Remove button.
9. Click OK.

8. Remove transport agent entries

Open agents.config which can be found under "<Drive>:\Program Files\Microsoft\Exchange Server\<version>\TransportRoles\Shared" and remove the following two lines:

<agent name="SMSMSERoutingAgent" baseType="Microsoft.Exchange.Data.Transport.Routing.RoutingAgent" classFactory="Symantec.MailSecurity.Server.TransportAgent.SMSMSERoutingAgentFactory" assemblyPath="<drive>\Program Files (x86)\Symantec\SMSMSE\<version>\Server\Symantec.MailSecurity.Server.TransportAgent.dll" enabled="true" />
<agent name="SMSMSESMTPAgent" baseType="Microsoft.Exchange.Data.Transport.Smtp.SmtpReceiveAgent" classFactory="Symantec.MailSecurity.Server.TransportAgent.SMSMSESMTPAgentFactory" assemblyPath="<drive>\Program Files (x86)\Symantec\SMSMSE\<version>\Server\Symantec.MailSecurity.Server.TransportAgent.dll" enabled="true" />
 




Article URL http://www.symantec.com/docs/TECH200443


Terms of use for this information are found in Legal Notices