How to uninstall Norton AntiVirus Corporate Edition 7.5 and 7.6 Server for Windows NT/2000/XP manually

Article:TECH99114  |  Created: 2001-01-11  |  Updated: 2010-08-19  |  Article URL http://www.symantec.com/docs/TECH99114
Article Type
Technical Solution


Environment

Issue



The preferred method for removing Norton AntiVirus Corporate Edition (NAVCE) is to run the built-in uninstaller program from Add/Remove Programs in the Windows NT/2000/XP Control Panel. However, sometimes due to an error or other reasons, you may need to uninstall NAVCE manually.

 


Solution



Uninstalling Norton AntiVirus server from a Windows NT/2000/XP computer manually
The easiest way to remove Norton AntiVirus server from a Windows NT/2000/XP computer is to run the uninstaller program from Add/Remove Programs in the
Windows NT Control Panel. If you cannot remove the program this way, then it must be removed from these three places:

  • The registry
  • The Start menu
  • The hard drive


Stop the following services before removing items from the registry, Start menu, or the hard drive:

  • DefWatch
  • Intel Alert Handler
  • Intel Originator
  • Intel File Transfer
  • Intel PDS
  • Norton AntiVirus Server


Removing Norton AntiVirus from the registry
 


WARNING: We strongly recommend that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the keys that are specified. Read the document How to back up the Windows registry for instructions.



You can navigate through the registry with the mouse (by clicking the plus and minus signs), or with the arrow keys (up/down to move up and down, left/right to collapse/expand a branch).

To edit the registry

  1. In the left window, navigate to the following key:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
     
  2. Right-click LDVPMenu, and then click Delete.
  3. Delete the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton AntiVirus NT
     
  4. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
     
  5. Delete the following registry keys:
    • DefWatch
    • Intel Alert Handler
    • Intel Alert Originator
    • Intel File Transfer
    • Intel PDS
    • NAVAP
    • NAVAPEL
    • NAVENG
    • NAVEX15
    • Norton AntiVirus Server
       
  6. Delete the folder SymEvent, if Norton AntiVirus is the only Symantec program on your computer.
  7. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
     
  8. Delete the following entries:
    • Defwatch
    • Intel Alert Handler
    • Intel Alert Originator
    • Intel AMS II
    • Intel File Transfer Service
    • Intel PDS Service
    • Norton AntiVirus
       
  9. In the left window, navigate to, and delete the following key:

    HKEY_LOCAL_MACHINE\Software\Intel\DLLUsage\VP6
     
  10. Delete the folder VP6.
     
  11. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps
     
  12. Delete the following "Value" (Windows NT) or Name (Windows 2000) in the right pane:
    • VP6ClientInstalled
    • VP6UsageCount
       
  13. In the left pane, click My Computer, click Edit, and click Find. Search for the following string, and delete any keys or values found:

    VirusProtect6
     
  14. In the left pane, click My Computer, click Edit, and click Find. Search for the following string, and delete any keys or values found:

    86C46C6D5F9F3D11EBAE000ACC725290


    Note: There may be a large number of instances of this string.

     
  15. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
     
  16. Delete the folder named {D6C64C68-F9F5-11D3-BEEA-00A0CC272509}.
     
  17. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
     
  18. Delete the "Value" (Windows NT) or Name (Windows 2000) in the right pane: Vptray
     
  19. In the left window, navigate to the following registry keys and delete them:

    HKEY_LOCAL_MACHINE\Software\Symantec\Repair value
    HKEY_LOCAL_MACHINE\Software\Symantec\SourceDir value
    HKEY_LOCAL_MACHINE\Software\Symantec\TargetDir value
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\86C46C6D5F9F3D11EBAE000ACC725290


    WARNING: Follow the next two steps only if no other Symantec applications use virus definitions on the computer. If there are applications using virus definitions when the SharedDefs key is deleted, they will have to be uninstalled and reinstalled in order to function.

  20. If no other Symantec applications that use virus definitions are installed, navigate to the HKEY_LOCAL_MACHINE\Software\Symantec key. Otherwise, skip to step 22.
  21. Delete the SharedDefs entry.
  22. Close the registry editor, and then restart the computer.


Norton AntiVirus is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.

To remove Norton AntiVirus from the Start menu and hard disk

  1. On the Windows taskbar, right-click Start, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click the Norton AntiVirus Corporate Edition folder, and then click Delete.
  4. In Windows Explorer, find the Program Files folder.
  5. Right-click the NAVNT or NAV folder, and then click Delete.


    WARNING: Follow the next three steps only if NAVCE is the only Symantec application installed. If the VirusDefs folder is deleted while there are other Symantec applications using virus definitions, they must be uninstalled and reinstalled in order for them to function.

     
  6. If NAVCE is the only Symantec product on your computer, delete the Symantec folder.
  7. Navigate to the Program Files\Common Files\Symantec Shared folder.
  8. If NAVCE is the only Symantec product on your computer, delete the VirusDefs folder.
  9. Navigate to the folder appropriate to your operating system:
    • Windows 2000/XP
      C:\Documents and Settings\All Users\Application Data\Symantec
    • Windows NT 4.0
      C:\Winnt\Profiles\All Users\Application Data\Symantec

       
  10. Delete the Norton AntiVirus Corporate Edition folder.
  11. If present, delete "<Drive>:\Winnt\Installer\{D6C64C68-F9F5-11D3-BEEA-00A0CC272509}"
  12. Close Windows Explorer.





 



Legacy ID



2001011116210048


Article URL http://www.symantec.com/docs/TECH99114


Terms of use for this information are found in Legal Notices