Set ALL your Symantec services to disabled, reboot and then try to remove it.
Main Topics
Browse All TopicsCan someone tell me how to remove Symantec Antivirus from your PC? I can't get rid of it; Add/Remove Programs produces an Error 2318 while attempting to gather information and goes nowhere!; furthermore, their downloadable Removal Tool won't remove it because you have to first get rid of it through Add/Remove Programs, which I cannot do in the first place. Trying to use ccleaner failed as well because Symantec Antivirus was still there even after the logs indicating that series of files are now gone.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Please check out this most comprehensive guide:
http://www.askdavetaylor.c
Dave Taylor's guide IS EXCELLENT, I will second the above advice by torimar.
Here is Symantec's own page on the subject. and their Norton Removal Tool to use when you're having problems uninstalling NAV.
http://service1.symantec.c
I have used the Norton Removal Tool to uninstall NAV in the past when I needed to remove an older version before installing a newer version and had problems, and the Norton Removal Tool did succeed in solving my problem uninstalling NAV.
"...their downloadable Removal Tool won't remove it because you have to first get rid of it through Add/Remove Programs, which I cannot do in the first place..."
I've used the symnrt tool quite a few times, and I don't think I ever used Add/Remove first.
This is the latest download:
http://service1.symantec.c
I used this to remove an installation of Norton 2 days ago, and it worked fine.
To disable all Norton startups/services, go into msconfig (start - run - msconfig) and click on the startup tab. Disable all Norton startups. Go into services. Check the "Hide All Microsoft Services" box, and then disable all Norton services. Reboot. Try the removal tool again.
Good luck!
you can try downloading the force removal tool from the following link
http://www.experts-exchang
Follow the instructions on how to rename the cleanwipe.txt file and run it this fwill force the removal of symantec antivirus
Microsoft also offers a free tool to remote programs from your computer--"cleaning" them out from the add/remove programs list. Then you should be able to use symantec's removal tool. the program is called the Windows installer cleanup utility. It can be downloaded from:
http://support.microsoft.c
Now you should be able to run the symantec removal tool.
If it still fails, you will now be able to reinstall symantec, reboot, and then uninstall it from the control panel.
Either way, you should be good to go!
That depends on what you still wish to achieve.
If you think the program basically has already been removed, and you want to make sure no traces are left behind, use the guide that I posted above, and follow the steps from point 4 onwards. I can't imagine that guide would ever have been written if all you had to do in this special case was running CCleaner.
On the other hand, should you think the program still has to be removed, use the tool that jimmymcp02 was referring to.
I'll give it a try (I assume you are referring to the article on www.davetaylor.com) and get back to you on how it worked, thanks!
I'm sorry but I tried the exact steps illustrated in www.davetaylor.com and it was total epic fail.
Step 1 resulted in this error window:<img src="file:///C:/DOCUME%7E1
<img src="http://farm4.static.f
(in case you can't see: Internal Error 2318 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Antivirus Corporate Edition\7.5\APTemp\AP1.htm
So I decided to try to go to Step 4: No dice as program DefWatch.exe is currently in use.
I tried to disable via User Manager. No dice: Access is denied (I am running as admin on my own machine)
Sorry but Dave Taylor's steps do not seem to work for me. Is there another way to remove Symantec?
I tried the CleanWipe.exe tool recommended, however, Symantec is, believe it or not, still there, in Add/Remove Programs.
So I tried using Add/Remove Programs for fun and it seemed to have gotten rid of it, but I can't tell..
Here is the latest from HijackThis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:25:15 AM, on 12/28/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\Syste
C:\WINDO
C:\WINDOW
C:\WIND
C:\WI
C:\WIN
C:\WI
C:\W
C:\
C:
C
C:\Program
C:\WINDO
C:\WIND
C:\P
C:\Progr
C:\Pr
C
C:\WINDOW
C:\WINDOWS
C:\Progr
C:\Progra
C:\P
C:
C:
C:\Progra
C:\Pro
C:\Prog
C
C:\Program
C:\Pr
C:\Progra
C:\Progr
c:\W
C:\WINDOW
C:
C:\DOCU
C:\WINDO
C:\Prog
C:\Prog
C:\WI
R0 - HKCU\Software\Microsoft\In
R1 - HKLM\Software\Microsoft\In
R1
R1
R0
R1 - HKCU\Software\Microsoft\Wi
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-7
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-C
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-C
O
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-E
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-0
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.e
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusche
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtr
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpe
O4 - HKLM\..\Run: [Zune Launcher] "c:\Program Files\Zune\ZuneLauncher.ex
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.ex
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbar
O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-0
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-0
O16 - DPF: {0CCA191D-13A6-4E29-B746-3
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9
O16 - DPF: {30528230-99f7-4bb4-88d8-f
O
O16 - DPF: {6E32070A-766D-4EE6-879C-D
O1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aa
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.
O23 - Service: Juniper Network Connect Service (dsNcService) - Juniper Networks - C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.ex
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEU
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.e
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2
O2
--
End of file - 9669 bytes
The only Symantec related entry is here:
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEU
You could run HJT again and fix this entry.
You also have this:
C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.
Did you install this? It is commonly seen as Adware:
http://www.prevx.com/filen
http://www.emsisoft.com/en
Malwarebytes' Antimalware identifies it as such and will remove it as an infected file:
http://www.malwarebytes.or
Download the trial version, update it fully, then click on "Perform a quick scan". Show results then click on "remove selected".
Other than that, your log looks OK.
Thank you! I did the update via HJT and the log looks devoid of Symantec altogether!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:12:46 AM, on 12/28/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\Syste
C:\WINDO
C:\WINDOW
C:\WIND
C:\WI
C:\WIN
C:\WI
C:\W
C:\
C:
C
C:\Program
C:\WINDO
C:\WI
C:\P
C:\Progr
C:\Pr
C
C:\WINDOW
C:\WINDOWS
C:\Progr
C:\Progra
C:\P
C:
C:
C:\Progra
C:\Pro
C:\Prog
C:\Program
C
C:\Program
C:\Pr
C:\Progra
C:\Progr
c:\W
C:\WINDOW
C:
C:\Pr
C:\Prog
C:\WI
R0 - HKCU\Software\Microsoft\In
R1 - HKLM\Software\Microsoft\In
R1
R1
R0
R1 - HKCU\Software\Microsoft\Wi
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-7
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-C
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-C
O
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-E
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-0
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.e
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusche
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtr
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpe
O4 - HKLM\..\Run: [Zune Launcher] "c:\Program Files\Zune\ZuneLauncher.ex
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.ex
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbar
O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClien
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-0
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-0
O16 - DPF: {0CCA191D-13A6-4E29-B746-3
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9
O16 - DPF: {30528230-99f7-4bb4-88d8-f
O
O16 - DPF: {6E32070A-766D-4EE6-879C-D
O1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aa
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.
O23 - Service: Juniper Network Connect Service (dsNcService) - Juniper Networks - C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.ex
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.e
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2
O2
--
End of file - 9529 bytes
Hi everybody,
You can use Cleanwipe.exe tool which is symantec SEP-SAV official uninstall tool.
if you open a case to symantec, they can share it with you.
CleanWipe will remove all remnants of the following products from a computer:
· Symantec Endpoint Protection
· Symantec AntiVirus
· Symantec Client Security
· Symantec Sygate Enterprise Protection
· Symantec Network Access Control
· Norton AntiVirus
· Symantec System Center
· Symantec Endpoint Protection Manager
Hi Everybody;
You can use Cleanwipe.exe tool.
CleanWipe will remove all remnants of the following products from a computer:
· Symantec Endpoint Protection
· Symantec AntiVirus
· Symantec Client Security
· Symantec Sygate Enterprise Protection
· Symantec Network Access Control
· Norton AntiVirus
· Symantec System Center
· Symantec Endpoint Protection Manager
Business Accounts
Answer for Membership
by: ksbalamuralikrishnaPosted on 2008-10-29 at 23:48:02ID: 22838574
You can try the below mentioned two options. The second one is time consuming and have to be very careful while doing it.
1. Try re-installing the same or upgraded version of symantec antivirus software into the system. Then try to uninstall it properly from the Add/Remove Programes from the Control Panel.
2. Click Start->Run, type Regedit and go to the registry editing dialogue box. First export (backup) the complete registy to a file and store it in the secured place. Now search for the keywords "Symantec", "Norton" and delete the entries corresponding to it, this would be time consuming but has to take utmost care while deleting registry entries. Once completed restart the system. If it still exist, now try re-installing and uninstalling process.