How to uninstall the Norton AntiVirus Corporate Edition 7.5 and 7.6 for Windows NT/2000/XP client manually

Article:TECH99053  |  Created: 2000-01-01  |  Updated: 2009-01-22  |  Article URL http://www.symantec.com/docs/TECH99053
Article Type
Technical Solution


Environment

Issue



This document describes how to manually uninstall the Norton AntiVirus Corporate Edition 7.5 and 7.6 for Windows NT/2000/XP client.


Solution



This article only addresses Windows NT/2000/XP. For Windows 95/98/Me, read the article How to uninstall the Norton AntiVirus Corporate Edition 7.x for Windows 95/98/Me client manually.

The easiest way to remove Norton AntiVirus Corporate Edition (NAVCE) 7.5 or 7.6 from your computer is to run the built-in uninstaller program from Add/Remove Programs in the Windows NT Control Panel.

This document describes how to manually remove NAVCE from the following three places:
  • The registry
  • The Start menu
  • The hard drive

To remove NAVCE from the registry

WARNING: The registry is a very important part of Windows NT/2000. If it becomes corrupt, or some of the data within it is lost, then you may have problems starting the computer or running other applications. Make changes to it carefully.

To back up the registry
  1. Logon as Administrator.
  2. On the Start menu, click Run.
  3. Type regedit and then click OK.
  4. On the Registry Editor menu, click the Registry menu > Export Registry.
  5. Type a file name with which to save the current registry. By default, the Registry Editor will save files in the root of your C:\ drive with the .reg extension.
  6. Click Save. You now have a backup of your registry. To restore a registry backup with the default .reg extension, double-click the file name. Although this is a handy way to restore files, do not double-click the file unless you are absolutely sure that you want to restore the backup registry.

With the registry backed up, you are now ready to edit the registry. You can navigate through the registry either with the mouse (by clicking the plus and minus signs) or with the arrow keys (up/down to move up and down, left/right to collapse/expand a branch).

To edit the registry
  1. Stop the Norton AntiVirus Client and Defwatch services if they are running.
  2. Navigate to the following subkey:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
  3. Delete the LDVPMenu entry.
  4. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
  5. Delete the following entries:
    Defwatch
    NAVAP
    NAVAPEL
    NAVENG
    NAVEX15
    Norton AntiVirus Client
    Norton AntiVirus Server
    (This entry is not normal for a client install, when found, be sure to delete.)
  6. If no other Symantec products are installed, then also delete the SymEvent entry.
  7. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
  8. Delete the Norton AntiVirus entry.
  9. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\Software\INTEL\DLLUsage
  10. Delete the VP6 entry
  11. In the left pane, click My Computer, click Edit, and then click Find. Search for the following string, and delete any keys or values found:

    VirusProtect6

    Continue to search for this string until no further results appear.
  12. In the left pane, click My Computer, click Edit, and then click Find. Search for the following string, and delete any keys or values found:

    74BE21DBFDBD3D11EBAE000ACC725290

    Continue to search for this string until no further results appear.
  13. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps
  14. Delete the following entries:
    VP6TempID
    VP6ClientInstalled
    NAVCEClientNumber


    WARNING: Follow the next two steps only if no other Symantec applications use virus definitions on the computer. If there are applications using virus definitions when the SharedDefs key is deleted, they will have to be uninstalled and reinstalled in order to function.

  15. If no other Symantec applications that use virus definitions are installed, navigate to the HKEY_LOCAL_MACHINE\Software\Symantec key. Otherwise, skip to step 17.
  16. Delete the SharedDefs entry.
  17. Delete the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BD12EB47-DBDF-11D3-BEEA-00A0CC272509}
  18. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  19. Delete the vptray entry.
  20. Restart the computer.


Note: Norton AntiVirus Corporate Edition is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.


To remove NAVCE from the Start menu
  1. Right-click the Start button, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click the Norton AntiVirus Corporate Edition folder, and then click Delete.
    To remove NAVCE from the hard drive
    1. Open the Windows Explorer.
    2. Navigate to the C:\Program Files folder.
    3. Right-click the NAVNT or NAV folder, and then click Delete.
    4. On Windows NT, navigate to the C:\WINNT\Profiles\All Users\Application Data folder. On Windows 2000, navigate to the C:\Documents and Settings\All Users\Application Data folder.

      WARNING: Follow the next three steps only if NAVCE is the only Symantec application installed. If the VirusDefs folder is deleted while there are other Symantec applications using virus definitions, they must be uninstalled and reinstalled in order to function.

    5. If NAVCE is the only Symantec product on your computer, delete the Symantec folder.
    6. Navigate to the Program Files\Common Files\Symantec Shared folder.
    7. If NAVCE is the only Symantec product on your computer, delete the VirusDefs folder.
    8. Navigate to the folder appropriate to your operating system:
      • Windows 2000/XP
        C:\Documents and Settings\All Users\Application Data\Symantec
      • Windows NT 4.0
        C:\Winnt\Profiles\All Users\Application Data\Symantec

    9. Delete the Norton AntiVirus Corporate Edition folder.
    10. Close Windows Explorer.






    Legacy ID



    2000120111571948


    Article URL http://www.symantec.com/docs/TECH99053


    Terms of use for this information are found in Legal Notices