How to manually uninstall Symantec AntiVirus Corporate Edition 8.x Client on Windows NT/2000/XP

Article:TECH99853  |  Created: 2002-01-12  |  Updated: 2004-01-08  |  Article URL http://www.symantec.com/docs/TECH99853
Article Type
Technical Solution


Environment

Issue



This document discusses the manual uninstallation of the Symantec AntiVirus Corporate Edition (Symantec AV) 8.x Client for Windows NT/2000/XP.


Solution



This document only addresses Windows NT/2000/XP. For Windows 98/Me, read the following document: How to manually uninstall the Symantec AntiVirus Corporate Edition 8.0 for Windows 98/Me client.

The easiest way to remove Symantec AV 8.x client from your computer is to run the built-in uninstaller program from Add/Remove Programs in the Windows NT Control Panel.

This document describes how to manually remove Symantec AV from the following three places:
  • The registry
  • The Start menu
  • The hard drive

Removing Symantec AntiVirus Corporate Edition from the registry

WARNING: We strongly recommend that you back up the registry before making any changes. Incorrect changes to the registry could result in permanent data loss or damaged files. Make sure that you modify only the keys specified. Read the document How to back up the Windows registry and How to use the Windows Registry editor before proceeding.

To edit the registry
  1. Stop the following Symantec Antivirus services, if they are running.
    - Symantec AntiVirus Client
    - Defwatch
  2. Navigate to the following subkey:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
  3. Delete the LDVPMenu entry.
  4. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
  5. Delete the following entries:
    Defwatch
    NAVAP
    NAVAPEL
    NAVENG
    NAVEX15
    Norton AntiVirus Client
    Norton AntiVirus Server
    (This entry is not normal for a client install. When found, be sure to delete.)
  6. If no other Symantec products are installed, then also delete the SymEvent entry.
  7. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
  8. Delete the following entries:
    Norton AntiVirus
    Defwatch
  9. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\Software\INTEL\DLLUsage
    Delete the VP6 entry.


    WARNING: Follow the next two steps only if no other Symantec applications use virus definitions on the computer. If there are applications using virus definitions when the SharedDefs key is deleted, they will have to be uninstalled and reinstalled in order to function.

  10. If no other Symantec applications that use virus definitions are installed, navigate to the HKEY_LOCAL_MACHINE\Software\Symantec key. Otherwise, skip to step 12.
  11. Delete the SharedDefs entry.
  12. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps
  13. Delete the following entries:
    VP6TempID
    VP6ClientInstalled
    NAVCEClientNumber
    NavCeClientNumber
    Nav
    Navnt
  14. Select My Computer in the left pane for each search, and click Edit in the Menu bar. Then click Find, and do a search for the following two keys:
    9526CFE08DA32DC4CB754D39A75FCCE0
    VirusProtect6

    Delete every instance of the above keys. These are the product install keys for the Symantec AV client.
  15. Delete the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E}
  16. Navigate to the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  17. Delete the vptray entry.
  18. Exit the Registry Editor.
  19. Restart the computer.

To remove Symantec AntiVirus Corporate Edition from the Start menu
  1. Right-click Start, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click the Symantec Client Security folder, and then click Delete.
    To remove Symantec AntiVirus Corporate Edition client from the hard drive
    1. Open the Windows Explorer.
    2. Navigate to the C:\Program Files\Symantec_Client_Security folder.
    3. Right-click the Symantec AntiVirus folder, and then click Delete.

      WARNING: Follow the next two steps only if Symantec AV is the only Symantec application installed. If the VirusDefs folder is deleted while there are other Symantec applications using virus definitions, they must be uninstalled and reinstalled in order for them to function.

    4. Navigate to the Program Files\Common Files\Symantec Shared folder.
    5. If Symantec AV is the only Symantec product on your computer, delete the VirusDefs folder.
    6. Navigate to the folder appropriate to your operating system:
      • Windows 2000/XP
        C:\Documents and Settings\All Users\Application Data\Symantec
      • Windows NT 4.0
        C:\Winnt\Profiles\All Users\Application Data\Symantec
    7. Delete the Norton AntiVirus Corporate Edition folder.
    8. Close Windows Explorer.


    Note: Symantec AV is now disabled even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.







    Legacy ID



    2002081213583048


    Article URL http://www.symantec.com/docs/TECH99853


    Terms of use for this information are found in Legal Notices