WelcomeProducts & ServicesSecurity ResponseSupportSolutions & IndustriesLicensingTrainingStore
Enterprise
Symantec.com > Enterprise > Support > Knowledge Base


How to uninstall Norton AntiVirus Corporate Edition 7.5 and 7.6 Server for Windows NT/2000/XP manually

Question/Issue:
The preferred method for removing Norton AntiVirus Corporate Edition (NAVCE) is to run the built-in uninstaller program from Add/Remove Programs in the Windows NT/2000/XP Control Panel. However, sometimes due to an error or other reasons, you may need to uninstall NAVCE manually.


Solution:
Uninstalling Norton AntiVirus server from a Windows NT/2000/XP computer manually
The easiest way to remove Norton AntiVirus server from a Windows NT/2000/XP computer is to run the uninstaller program from Add/Remove Programs in the
Windows NT Control Panel. If you cannot remove the program this way, then it must be removed from these three places:


Stop the following services before removing items from the registry, Start menu, or the hard drive:
Removing Norton AntiVirus from the registry

WARNING: We strongly recommend that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the keys that are specified. Read the document How to back up the Windows registry for instructions.

You can navigate through the registry with the mouse (by clicking the plus and minus signs), or with the arrow keys (up/down to move up and down, left/right to collapse/expand a branch).

To edit the registry
  1. In the left window, navigate to the following key:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
  2. Right-click LDVPMenu, and then click Delete.
  3. Delete the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton AntiVirus NT
  4. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
  5. Delete the following registry keys:
    • DefWatch
    • Intel Alert Handler
    • Intel Alert Originator
    • Intel File Transfer
    • Intel PDS
    • NAVAP
    • NAVAPEL
    • NAVENG
    • NAVEX15
    • Norton AntiVirus Server
  6. Delete the folder SymEvent, if Norton AntiVirus is the only Symantec program on your computer.
  7. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
  8. Delete the following entries:
    • Defwatch
    • Intel Alert Handler
    • Intel Alert Originator
    • Intel AMS II
    • Intel File Transfer Service
    • Intel PDS Service
    • Norton AntiVirus
  9. In the left window, navigate to, and delete the following key:

    HKEY_LOCAL_MACHINE\Software\Intel\DLLUsage\VP6
  10. Delete the folder VP6.
  11. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps
  12. Delete the following "Value" (Windows NT) or Name (Windows 2000) in the right pane:
    • VP6ClientInstalled
    • VP6UsageCount
  13. In the left pane, click My Computer, click Edit, and click Find. Search for the following string, and delete any keys or values found:

    VirusProtect6
  14. In the left pane, click My Computer, click Edit, and click Find. Search for the following string, and delete any keys or values found:

    86C46C6D5F9F3D11EBAE000ACC725290


    Note: There may be a large number of instances of this string.

  15. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
  16. Delete the folder named {D6C64C68-F9F5-11D3-BEEA-00A0CC272509}.
  17. In the left window, navigate to the following key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
  18. Delete the "Value" (Windows NT) or Name (Windows 2000) in the right pane: Vptray
  19. In the left window, navigate to the following registry keys and delete them:

    HKEY_LOCAL_MACHINE\Software\Symantec\Repair value
    HKEY_LOCAL_MACHINE\Software\Symantec\SourceDir value
    HKEY_LOCAL_MACHINE\Software\Symantec\TargetDir value
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\86C46C6D5F9F3D11EBAE000ACC725290


    WARNING: Follow the next two steps only if no other Symantec applications use virus definitions on the computer. If there are applications using virus definitions when the SharedDefs key is deleted, they will have to be uninstalled and reinstalled in order to function.

  20. If no other Symantec applications that use virus definitions are installed, navigate to the HKEY_LOCAL_MACHINE\Software\Symantec key. Otherwise, skip to step 22.
  21. Delete the SharedDefs entry.
  22. Close the registry editor, and then restart the computer.

Norton AntiVirus is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.

To remove Norton AntiVirus from the Start menu and hard disk
  1. On the Windows taskbar, right-click Start, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click the Norton AntiVirus Corporate Edition folder, and then click Delete.
  4. In Windows Explorer, find the Program Files folder.
  5. Right-click the NAVNT or NAV folder, and then click Delete.


    WARNING: Follow the next three steps only if NAVCE is the only Symantec application installed. If the VirusDefs folder is deleted while there are other Symantec applications using virus definitions, they must be uninstalled and reinstalled in order for them to function.

  6. If NAVCE is the only Symantec product on your computer, delete the Symantec folder.
  7. Navigate to the Program Files\Common Files\Symantec Shared folder.
  8. If NAVCE is the only Symantec product on your computer, delete the VirusDefs folder.
  9. Navigate to the folder appropriate to your operating system:
    • Windows 2000/XP
      C:\Documents and Settings\All Users\Application Data\Symantec
    • Windows NT 4.0
      C:\Winnt\Profiles\All Users\Application Data\Symantec

  10. Delete the Norton AntiVirus Corporate Edition folder.
  11. If present, delete "<OS drive>:\Winnt\Installer\{D6C64C68-F9F5-11D3-BEEA-00A0CC272509}"
  12. Close Windows Explorer.


 

Available Translations:



Document ID: 2001011116210048
Last Modified: 10/22/2009
Date Created: 01/11/2001
Operating System(s): Windows 2000, Windows NT 4.0, Windows XP
Product(s): Norton AntiVirus Corporate Edition 7.0
Release(s): NAVCE 7.5x [All Releases], NAVCE 7.6 [All Releases]


Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements
©1995 - 2009 Symantec Corporation