Endpoint Protection

 I came across this document while looking for something totally different.

This document is very good for those of you who do not have access to the Cleanwipe utility and are having problems with the normal uninstall process.

However there are many registry keys that needs to be deleted so best would be to use an automated script for this purpose.

Anyone interested in doing this and upload to the downloads section? :)

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007073018014248

prepared it long before.


copy the file to a notepad save it as .bat extension...

P.S: I hold no responsibilty for using this :)

REM FILE: RemoveSymantecEndPoint.bat
---------------------------------------------------
@echo off
ECHO Uninstalling manually Symantec EndPoint
smc -stop

rem STOPPING SERVICES...
net stop "Symantec Endpoint Protection"
net stop "Symantec Event Manager"
net stop "Symantec Network Access Control"
net stop "Symantec Settings Manager"
net stop "Windows Installer"

rem DISABLING Windows Installer Service temporarily...
sc config "Windows Installer" start= disabled

rem ENDING TASK "ccApp.exe" (killing process)...
taskkill /IM ccApp.exe


rem DELETING REGISTRY KEYS...
regedit /s deleteKeys.reg

 

 

Windows Registry Editor Version 5.00
;-----------------------
;Deleting Registry Keys
;-----------------------
; [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\LDVPMenu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ccEvtCli.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ccProSub.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ccSetEvt.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ccSvcHst.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\CliProxy.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\HPPProtectionProviderUI.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\PatchWrap.EXE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\ Classes\AppID\ProtectionUtil.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\RTVScan.EXE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SavMainUI.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SavUI.EXE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SepLuCallback.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SescLU.EXE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SmcGui.EXE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SPBBCEVT.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\Srtsp32.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SyKnAppS.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CcErrDsp.ErrorDisplay]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CcErrDsp.ErrorDisplay.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CcWebWnd.ccWebWindow]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CcWebWnd.ccWebWindow.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cliproxy.objects]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cliproxy.objects.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Cliproxy.ScanManagerCOMCallback]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Cliproxy.ScanManagerCOMCallback.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\LDVPMenu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EXCHNGUI.ExchngUICtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\LDVPMenu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FwsCtrl.CAutoprotectFw]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FwsCtrl.CAutoprotectFw.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FwsCtrl.CCmcManagement]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FwsCtrl.CCmcManagement.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FwsCtrl.CNacManagement]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FwsCtrl.CNacManagement.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FwsCtrl.FwsProtectionProvider]
[-HKEY_LOCAL_MACHINE\SOFTWARE\ Classes\FwsCtrl.FwsProtectionProvider.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HPPProtectionProviderUI.HPPProtection]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HPPProtectionProviderUI.HPPProtection.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HPPProtectionProviderUI.HPPProtectionPr]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HPPProtectionProviderUI.HPPProtectionProvider.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\INETMAILUI.InetMailUICtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\03E4A8BF51994184DA9F240ED0F9CDD3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\03E4A8BF51994184DA9F240ED0F9CDD3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDDATETIME.LDDateCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDDATETIME.LDStaticDateTimeCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDDATETIME.LDTimeCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPCTLS.LDVPActionsCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPCTLS.LDVPEditCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPCTLS.LDVPExtensionsCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPCTLS.LDVPResultsCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPCTLS.LDVPVirusDetailsCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS.LDVPAboutDlgCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS.LDVPCompressedCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS.LDVPEmailNotifySettingsCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS.LDVPMessageConfigCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS.LDVPSchedule2Ctrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS.LDVPScheduleCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS. LDVPStorageViewCtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPDLGS.LDVPThreatExclusionsDlgCtl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LDVPUI.LDVPUICtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LOTNOTESUI.LotNotesUICtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PatchWrap.PatchWrapper]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PatchWrap.PatchWrapper.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.ProtectionCollection]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.ProtectionCollection.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.ProtectionProviderColl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.ProtectionProviderCollec]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.Protection_GUID_Contai.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.Protection_GUID_Containe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusFinder]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusFinder.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_Autoprot.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_Autoprotec]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_Containe.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_Container]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_Definiti.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_Definition]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_HostInte.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_HostIntegr]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_NetworkA.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_NetworkAcc]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_NetworkQ.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_NetworkQua]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_Provider.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_ProviderAu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_ProviderEr]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectionUtil.StatusProblem_ProviderOf]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.CSavInfo]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.CSavInfo.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.CSavQuarantine]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.CSavQuarantine.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.OEMSettingsManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.OEMSettingsManager.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.ResultsViewCOMCallback]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.ResultsViewCOMCallback.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.ScanManagerService]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.ScanManagerService.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.VirusFoundCOMCallback]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Rtvscan.VirusFoundCOMCallback.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.ConfigureableScanCollection]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.ConfigureableScanCollection.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavAutoprotectExchange]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavAutoprotectExchange.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavAutoprotectFilesystem]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavAutoprotectFilesystem.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\ Classes\SavMainUI.SavAutoprotectInternetEmail]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavAutoprotectInternetEmail.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavAutoprotectNotes]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavAutoprotectNotes.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavConfigureableScan]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavConfigureableScan.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavProtectionProvider]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavProtectionProvider.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavQuarantineItem]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavQuarantineItem.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavQuarantineItemCollection]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.SavQuarantineItemCollection.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.TamperProtectionProvider]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.TamperProtectionProvider.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.TamperProtectProcess]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavMainUI.TamperProtectProcess.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavUI.ResultsViewCOMAdapter]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavUI.ResultsViewCOMAdapter.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavUI.VirusFoundCOMAdapter]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SavUI.VirusFoundCOMAdapter.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SEP.AV.ScanDlgs]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SepLuCallback.SepLuCallbackHandler]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SepLuCallback.SepLuCallbackHandler.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.AvLuCallback]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.AvLuCallback.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.ContentUpdateManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.ContentUpdateManager.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.MonikerInfo]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.MonikerInfo.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.MonikerInfoCollection]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.MonikerInfoCollection.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.SepContentService]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SescLu.SepContentService.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Shelsel2.Shelsel2]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Shelsel2.Shelsel2.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.ControlEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.ControlEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.ErrorEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.ErrorEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.MountEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.MountEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.NonViralEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.NonViralEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.StateChangeEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.StateChangeEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.ViralEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\srtsp32.ViralEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SyKnAppS.LUCallback]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SyKnAppS.LUCallback.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccEvtMgr.EventManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccEvtMgr.EventManager.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccEvtMgr.LogManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccEvtMgr.LogManager.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccEvtMgr.ModuleManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccEvtMgr.ModuleManager.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccProSub.ProviderProxy]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccProSub.ProviderProxy.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccProSub.SubscriberProxy]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccProSub.SubscriberProxy.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccSetEvt.SettingsChangeEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccSetEvt.SettingsChangeEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccSetMgr.SettingsService]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.CommonClient.ccSetMgr.SettingsService.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.SSHelper]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.SSHelper.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stCallbackManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stCallbackManager.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stCheckForUpdates]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stCheckForUpdates.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stDisScriptEngine]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stDisScriptEngine.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stHost]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stHost.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stHostCatalog]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stHostCatalog.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\ Classes\Symantec.stInetBatchGet]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stInetBatchGet.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stInetConnParms]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stInetConnParms.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stInetGetFile]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stInetGetFile.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stInetTransferItem]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stInetTransferItem.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stLog]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stLog.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stLUProgressCallback]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stLUProgressCallback.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stPatch]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stPatch.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stPatchCatalog]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stPatchCatalog.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stSettings]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.stSettings.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.SymNeti.SymNetiProviderProxy]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.SymNeti.SymNetiProviderProxy.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.SymNeti.SymNetiSubscriberProxy]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Symantec.SymNeti.SymNetiSubscriberProxy.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.AlertEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.AlertEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.LocationChangeEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.LocationChangeEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\ Classes\SymNeti.LocationEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.LocationEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.LogEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.LogEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.NetworkChangeEvent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SymNeti.NetworkChangeEvent.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SYMPROTECTUI.SymProtectUICtrl.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TSSAFILE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VpshellEx.VpshellEx]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VpshellEx.VpshellEx.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\AMS2]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\ccSvcHst]

; [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Client\Extensions]
"Outlook Setup Extension"=-
"Symantec AntiVirus Outlook Protection"=-

; [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ccApp.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Smc.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\Display\shellex\PropertySheetHandlers\LDVP Shell Extensions]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\03E4A8BF51994184DA9F240ED0F9CDD3]

; [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccApp"=-

; [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellExtensions\Approved]
"{8BEEE74D-455E-4616-A97A-F6E86C317F32}"=-

;;I DON'T KNOW HOW TO DO IT WITH A SCRIPT

; [-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\COH_PVLInfo]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Common Client]

[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps]
"AMSUsageCount"=-
"COHDataDIR"=-
"COHDIR"=-
"GEH"=-
"IPSEngine"=-
"MSL"=-
"SAV Install Directory"=-
"SAVCE"=-
"Savrt"=-
"SavSubmissionEngine"=-
"SavSubmissionEngineData"=-
"SPBBC"=-
"SRTSP"=-
"SRTSPQuarantine"=-
"SyKnAppS"=-
"SYKNAPPSDEF"=-
"SymNetDrv"=-
"VP6ClientInstalled"=-
"VP6UsageCount"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\PatchInst]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SPBBC]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SRTSP]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SyKnAppS]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec AntiVirus]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SymNetDrv]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\VxMSLight]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antvirus]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ccEvtMgr]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ccSetMgr]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SmcServicev]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Symantec Antivirus]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Symantec Antvirus]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ccEvtMgr]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ccSetMgr]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COH_Mon]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ccEvtMgr]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ccSvcHst]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Symantec AntiVirus]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\SRTSP]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\SRTSPL]

; [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\13]
"ConfigUiPath"=-
"IdentityPath"=-
"InteractiveUIPath"=-
"Path"=-

 

Good Initiative Rafeeq but the syntax seems to be wrong. I have a testmachine that I tried this script on. It has the latest version of SEP.
______________________________________________________________________________


 C:\>"C:\Documents and Settings\storspe\Desktop\uninstall_script.bat"

Another way would be to  use the  MIcrosoft Installer (MSI) command line interface

How to uninstall the Symantec Endpoint Protection Client using the MIcrosoft Installer (MSI) command line interface.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091209261948

sorry for the typo

just put  a ; on the very first line can u try running it again?

Prachand: I know that the msi uninstaller is possible. What is interesting with this method is that it shows you exactly what needs to be removed to do a proper clean of your system.

Rafeeq: I will try it again as soon as I have some time 

hi,

Firstly, I appreciate you not using the cleanwipe tool, as it is not recommended to be run on any other OS accept WinXp.
Moreover, there are chances of loosing the NIC drivers/blue screen after running cleanwipe. Although if Symantec recommends you to run Cleanwipe, it certainly does come with a Disclaimer ;)

Here are some manual steps that we can try.

NOTE:  The steps that are mentioned below, needs to be executed only if you do not have any other Symantec product running on the same system.
              Make sure you are logged in as Domain/local admin account.

Step 1: Removing Symantec Endpoint Protection/ Symantec Antivirus / Liveupdate from the Add/remove programs.
               ( If while uninstalling you encounter an error message like "Access is denied" or "Fatal Error during uninstalltion" dont worry ;) )

Step 2: Browse to c:\program files\ [ delete the Symantec/ Symantec Antivirus ] folder.
                                 c:\program files\common files\ [ delete the Symantec shared ] folder.
                                 c:\documents and settings\ All users\ Application Data\ [ delete the Symantec ] folder.
 
FYI : If you are not able to delete any folder or file in the above mentioned locations, you may try a third party tool (at your own risk) called as Unlocker,
         which you can download from google or find at http://download.cnet.com/Unlocker/3000-2248_4-10493998.html

Step 3: Open the registry using the regedit command in the run openbox.
              -Take a backup of the entir registry.
              -Navigate to the following Registry Entries and delete the Symantec entry.
              -HKEY_CURRENT_USER\Software\Symantec
              -HKEY_LOCAL_MACHINE\SOFTWARE\Symantec
              -HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
              -HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
               NOTE: In the above mentioned entry, after highlighting folders key, in the right hand window search for Symantec Entry and delete them.
                            You may find a lot of enteries just keep on deleting them ;). This may take a long time, but we need to ensure that we delete all the
                            symantec entries from the registry. F3 key should help you find and jump to the next symantec entry moving forwards.
              -repeat the above untill you get  a message that says, registry could not find the entry.

Step 4: Downlaod and install Windows install cleanup utility and check for any traces of Symantec in the list. If found any, remove it.

Step 5: Open the device manager and go to view options and select view hidden devices.
             -Expand the Non- Plug n Play devices and uninstall the SPBBCDrv (if present) and then restart your system.

I guess this all should help you get Symantec uninstalled thoroughly from your system.

 @Manish: Thank you for another alternative solution for removing SEP.

@Rafeeq: Can you be a bit more specific regarding your script. It looks like there are more typos to make it work ok.

hi,

Would you please Update us, if the given resolution has worked for you.

If yes, we would appreciate if you could mark it as a solution.

regards,
MG

Our problem is the MSI process is what runs in the add/remove programs so if that doesn't work, you've already tried the msi method.
What's needed is an extraction process for SEP only, when the MSI uninstall fails, and it often does.
The document given in this thread is also only useful in cases where you want to wipe Symantec off the face of the disk.
In my case, I can't do that, have too much OTHER stuff installed. So need a process still for removing SEP.
Please don't re-post the document about wiping all the Symantec entries from the registry or manually running the MSI /x as if add/remove didn't work, that sure isn't going to...........

ShadowsPapa I do not see where you are coming from. Of course a manual removal will work if the add/remove method fails. Deleting registry keys works perfect for other apps that will not remove properly so why would this be any different?

What other stuff are you referring to that will not work when you remove sep with this method?
 

I never said a manual removal won't work!
I said that manually running MSI won't work...........
The MSI /x won't work as that's the process that the add/remove programs in the control panel uses.
Please read the message again -
MANAULLY removing the applications CAN work if you have a manual removal process for SEP, which Symantec does not have.
But then saying run MSI to uninstall - that's pretty much the same as add/remove programs and is not hte same as manually removing a product, so how could manually running MSI be any different or work better? The difference - launching it from the GUI or command line.....
I never said deleting registry keys and deleting files - the manual method won't work. I said running MSI command line as a removal won't work if add/remove programs won't work, UNLESS you have a corrupted add/remove programs list - which happens. In that case, SEP may not even be listed. So you run MSIEXEC /X and then the identifier for SEP.
A whole lot different than deleting registry keys.
Symantec's manaul removal process is a shotgun approach - if you have any other Symantec apps installed, you destroy them as well, possibly making things WORSE. That's why I maintain - they do not have a removal process specific to SEP at this time, they say remove anything with the word 'symantec' in it.

Here is what I said:
>>manually running the MSI /x as if add/remove didn't work, that sure isn't going to<<
Different than manually removing a product using deletion of registry keys and files...........  ;-)