Manually Uninstalling Symantec AntiVirus
It you are unable to uninstall Symantec AntiVirus 9 or 10 from a workstation using the uninstall program, you can follow the procedure below to remove Symantec AntiVirus manually.
Stop Symantec AntiVirus services
Some or all of the following services may be running on your computer. They must all be stopped before removing items from the registry, Start menu, or hard drive.
• Intel Alert Handler
• Intel Alert Originator
• Intel File Transfer
• Intel PDS
• SAVRoam
• Symantec AntiVirus Definition Watcher
• Symantec Event Manager
• Symantec Network Drivers Service
• Symantec Password Validation
• Symantec SecurePort
• Symantec Settings Manager
• Symantec AntiVirus
1. On the Windows taskbar, click Start > Run.
2. In the dialog box type the following:
services.msc
3. Click OK.
4. Right-click the Intel Alert Handler service, and click Stop.
5. Perform step 4 for each of the services listed above.
Remove the Symantec AntiVirus keys from the registry
1. In the Registry Editor, navigate to the following key:
HKEY_CLASSES_ROOT\*\Shelle
2. Right-click the LDVPMenu entry, and then click Delete.
3. Go to the following key:
HKEY_LOCAL_MACHINE\SOFTWAR
4. Delete the following child keys:
• Common Client
• SharedDefs
• Symantec AntiVirus
• Symevent
• SymNetDrv
5. Go to the following key in the left pane:
HKEY_LOCAL_MACHINE\SOFTWAR
6. Delete the following entries:
• VP6ClientInstalled
• VP6UsageCount
• AVENGEDEFS
• Common Client
• Common Client Data
• Common Client Decomposers
• IDSDefs
• SAVCE
• SAV Install Directory
• SCS Install Directory
• Symantec Shared Directory
• SymNetDrv
7. Go to the following key in the left pane:
HKEY_LOCAL_MACHINE\System\
8. Delete the following child keys:
__________________________
Note: Delete the SymEvent keys only if Symantec Client Security is the only Symantec program installed.
__________________________
• ccEvtMgr
• ccPwdSvc
• ccSetMgr
• DefWatch
• Intel Alert Handler
• Intel Alert Originator
• Intel File Transfer
• Intel PDS
• NAVENG
• NAVEX15
• SavRoam
• SAVRT
• SAVRTPEL
• SNDSrvc
• Symantec AntiVirus
• SymEvent
• SYMREDRV
• SYMTDI
9. Go to any existing "ControlSet*"\Services keys and delete the same entries like in the previous step.
10. Delete the SymEvent keys only if Symantec Client Security is the only Symantec program installed.
11. Go to the following key in the left pane:
HKEY_LOCAL_MACHINE\System\
12. Delete the following entries:
• Defwatch
• ccEvtMgr
• ccSetMgr
• Intel Alert Handler
• Intel Alert Originator
• Intel AMS II
• Intel File Transfer Service
• Intel PDS Service
• SavRoam
• Symantec AntiVirus
13. Go to the following key in the left pane:
HKEY_LOCAL_MACHINE\SYSTEM\
14. Delete the SAVRT entry.
15. Go to any existing "ControlSet*"\Services\Eve
16. Go to the following key in the left pane:
HKEY_LOCAL_MACHINE\SOFTWAR
17. Under the Intel key, expand the DllUsage key, and then delete the VP6 key.
__________________________
WARNING: Make sure not to delete the Intel folder, since other programs or hardware might be using this key.
__________________________
18. In the left pane, highlight My Computer.
19. Click Edit -> Find.
20. Search for VirusProtect6 and delete all entries of this key.
Repeat this step until no more instances of VirusProtect6 are found.
21. In the left pane, highlight My Computer.
22. Click Edit > Find.
23. Search for:
497CA84818B8A04418EA464733
24. Delete all entries found.
__________________________
WARNING: Follow the next two steps only if no other Symantec applications use virus definitions on the computer. If there are applications using virus definitions when the SharedDefs key is deleted, they will have to be uninstalled and reinstalled in order to function.
__________________________
25. Go to the HKEY_LOCAL_MACHINE\Softwar
26. Delete the SharedDefs entry.
27. Go to the following key in the left pane:
HKEY_LOCAL_MACHINE\SOFTWAR
28. Delete the {848AC794-8B81-440A-81AE-6
29. Go to the following key in the left pane:
HKEY_LOCAL_MACHINE\SOFTWAR
30. Delete the vptray and ccApp keys.
31. Restart the computer.
Symantec AntiVirus is now disabled, even though traces of it may remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.
To remove Symantec Client Security from the Start menu
1. Right-click the Start button, and then click Open All Users.
2. Double-click Programs.
3. Right-click the Symantec Client Security folder, and then click Delete.
To remove Symantec Client Security from the hard drive
1. Click Start, point to Programs, and then click Windows Explorer.
2. Go to the Program Files folder.
3. Delete the Symantec AntiVirus folder.
__________________________
WARNING: Follow the next three steps only if Symantec AntiVirus is the only Symantec application installed. If the VirusDefs folder is deleted while there are other Symantec applications using virus definitions, they must be uninstalled and reinstalled in order for them to function.
__________________________
4. If Symantec AntiVirus is the only Symantec product on your computer, delete the Symantec folder.
5. Go to the Program Files\Common Files\Symantec Shared folder.
6. If Symantec AntiVirus is the only Symantec product on your computer, delete the VirusDefs folder.
7. Go to the folder appropriate for your operating system:
• In Windows NT 4.0, go to the following folder:
C:\Winnt\Profiles\All Users\Application Data\Symantec
• In Windows 2000/XP/2003, go to the following folder:
C:\Documents and Settings\All Users\Application Data\Symantec
8. Delete the Symantec AntiVirus Corporate Edition folder.
9. Exit Windows Explorer.
Main Topics
Browse All Topics
by: TOPIOPosted on 2007-05-09 at 16:01:44ID: 19061414
The first sugestion is to go to msconfig and turn off all starting services,
restart the computer in safe mode
and run the norton removal tool.
Once this is done restart the computer in safe mode again and manually delete the program folder in safe mode.
restart the computer and verify that the program is not running , then run msconfig again and turn on the services at startup