Symantec.com
VERITAS.com
Partners
About Symantec
cartCart
WelcomeProducts & ServicesSecurity ResponseSupportSolutions & IndustriesLicensingTrainingStore
Enterprise
Symantec.com > Enterprise > Support > Knowledge Base


PRINT THIS PAGE PRINT THIS PAGE

Manually uninstalling the Symantec AntiVirus 10.0 client

Question/Issue:
This document describes how to manually uninstall the Symantec AntiVirus 10.0 client from Windows 2003/XP/2000.


Solution:

Manual removal of the Symantec AntiVirus client manually involves the following three basic steps:


Stop Symantec AntiVirus services and processes
Ensure that the Symantec AntiVirus window is not open and is not currently running.

To stop the services
  1. On the Windows Taskbar, click Start > Run.
  2. In the Open box, type the following text:

    services.msc

  3. Click OK.
  4. For each of the following services, right-click the name of the service, and click Stop:
    • SAVRoam
    • Symantec AntiVirus
    • Symantec AntiVirus Definition Watcher
    • Symantec Event Manager
    • Symantec Settings Manager

To stop the processes
  1. Press Ctrl+Alt+Del.
  2. Click Task Manager.
  3. In Windows Task Manager, on the Processes tab, right-click the name of the service, and click End Process, for each of the following processes:
    • ccApp.exe
    • VPTray.exe
  4. Close the Windows Task Manager.


Remove Symantec AntiVirus from the registry
Most of the items that you must remove are entries in the Windows registry.

Note: You must have administrator permissions (read and write) to edit the registry.

WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.
For instructions, see How to back up the Windows registry.


To remove Symantec AntiVirus from the registry
  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    regedit

  3. Click OK.
  4. In the Windows Registry Editor, in the left pane, go to the following key:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers

  5. In the left pane, right-click LDVPMenu, and then click Delete.
  6. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec

  7. Delete the following keys:
    • SPBBC
    • Symantec AntiVirus
    • SymNetDrv

  8. Delete all of the following registry keys that exist:
    • HKEY_CLASSES_ROOT\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D
    • HKEY_CLASSES_ROOT\Installer\Features\0DE336A57D5E56D4BAD835DE34152048
    • HKEY_CLASSES_ROOT\Installer\Products\0DE336A57D5E56D4BAD835DE34152048
    • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D
    • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\0DE336A57D5E56D4BAD835DE34152048
    • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\0DE336A57D5E56D4BAD835DE34152048
    • HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage\VP6
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0DE336A57D5E56D4BAD835DE34152048


  9. Expand the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

    This key contains many <Package Code> keys.

  10. Click each <Package Code> key, and look in the right pane for references to Symantec AntiVirus.
    If you see any references to Symantec AntiVirus in the right pane, then delete the entire <Package Code> key.
  11. Go to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps

  12. Delete the following values:
    • AVENGEDEFS
    • Common Client
    • Common Client Data
    • Common Client Decomposers
    • NAVNT
    • SAV Install Directory
    • SAVCE
    • SPBBC
    • SymNetDrv
    • VP6ClientInstalled
    • VP6UsageCount

  13. Go to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services

  14. Delete the following keys:
    • ccEvtMgr
    • ccSetMgr
    • ccPwdSvc
    • DefWatch
    • NAVENG
    • NAVEX15
    • SavRoam
    • SAVRT
    • SAVRTPEL
    • SNDSrvc
    • SPBBCDrv
    • SPBBCSvc
    • Symantec AntiVirus
    • SYMREDRV
    • SYMTDI

  15. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the same entries as under CurrentControlSet\Services above.
  16. Go to the following key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application

  17. Delete the following entries:
    • Defwatch
    • ccEvtMgr
    • ccProxy
    • ccSetMgr
    • LiveUpdate
    • SavRoam
    • Symantec AntiVirus

  18. Go to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System, and delete the SAVRT key.
  19. Go to any existing "ControlSet*"\Services\EventLog\Application and "ControlSet*"\Services\EventLog\System keys and delete the same entries like in the previous four steps.
  20. In the left pane, click My Computer.
  21. On the Edit menu, click Find.
  22. Search for VirusProtect6.
    Delete all keys and values that contain this string.
  23. In the left pane, click My Computer.
  24. On the Edit menu, click Find.
  25. Search for 0DE336A57D5E56D4BAD835DE34152048.
    Delete all keys and values that contain this string.

    WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect registry entries that are used by other Symantec products. If you delete a key or value that is used by another Symantec product, that product must be removed and installed again.

  26. If no other Symantec applications that use virus definitions are installed, go to the following key:

    HKEY_LOCAL_MACHINE\Software\Symantec

  27. Delete the SharedDefs value.
  28. If Symantec AntiVirus is the only Symantec program installed, delete the following keys:
    • Common Client
    • SymEvent

  29. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the ccApp value.
  30. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the vptray value.
  31. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services, and delete the SymEvent key.
  32. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the SymEvent keys.
  33. Restart the computer.

Symantec AntiVirus is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.


Remove Symantec AntiVirus from the Start menu and the hard drive
After Symantec AntiVirus is disabled, all that remains is to remove leftover files and shortcuts to the program.

To remove Symantec AntiVirus from the Start menu
  1. On the Windows taskbar, right-click Start, and then click Open All Users.
  2. Double-click Programs.
  3. Right-click Symantec AntiVirus, and then click Delete.


To remove Symantec AntiVirus from the hard drive
  1. On the Windows taskbar, click Start > Programs > Windows Explorer.
  2. Open the Program Files folder.
  3. Right-click Symantec AntiVirus, and then click Delete.

    WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect files and folders that are used by other Symantec products. If you delete a file or folder that is used by another Symantec product, that product must be removed and installed again.

  4. If Symantec AntiVirus is the only Symantec product on your computer, delete the Symantec folder.
  5. Open the following folder:

    Program Files\Common Files\Symantec Shared

  6. If Symantec AntiVirus is the only Symantec product on your computer, delete the following folders:
    • Decomposers
    • SPBBC
    • SPManifests
    • SSC
    • VirusDefs

  7. Go to the following folder:

    C:\Documents and Settings\All Users\Application Data\Symantec

  8. Delete the following folders:
    • Symantec AntiVirus Corporate Edition
    • Common Client

  9. Exit Windows Explorer.



 

Available Translations:



Document ID: 2005050210381448
Last Modified: 01/02/2007
Date Created: 05/02/2005
Operating System(s): Windows 2000, Windows XP Home, Windows XP Professional Edition, Windows XP Tablet PC, Windows Server 2003 32-bit Edition, Windows XP Media Center Edition 2005
Product(s): Symantec AntiVirus Corporate Edition 10.0
Release(s): SAV 10.0 [All Releases]


Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements
©1995 - 2009 Symantec Corporation