Manually uninstalling Symantec Client Security 3.1 client
Question/Issue:
This document describes how to manually uninstall Symantec Client Security 3.1 client from Windows XP/2000.
Solution:
This procedure involves the following five steps:
- Disable Tamper Protection before you stop services.
- Close or stop Symantec Client Security programs.
- Stop Symantec Client Security services.
- Remove Symantec Client Security from the registry.
- Remove Symantec Client Security from the Start menu and from the hard drive.
Make sure that Symantec Client Security is not running.
Disable Tamper Protection
You must disable Tamper Protection before you stop Symantec Client Security services.
To disable Tamper Protection
- Start Symantec AntiVirus.
- On the Configure menu, click Tamper Protection.
- Uncheck Enable Tamper Protection.
- Click OK.
End Symantec Client Security processes
You must end the following processes before you can continue:
- ccApp.exe
- ISSVC.exe
- NMain.exe
- Vpc32.exe
- Vptray.exe
To end the processes
- On the Windows taskbar, click Start > Run.
- In the Open box, type the following text:
taskmgr.exe
- On the Processes tab, right-click ccApp.exe, and then click End Process.
- Right-click ISSVC.exe, and then click End Process.
- Right-click NMain.exe, and then click End Process.
- Right-click Vpc32.exe, and then click End Process.
- Right-click Vptray.exe, and then click End Process.
Stop Symantec Client Security services
You must stop the following services before you remove items from the registry, the Start menu, or the hard drive.
- SAVRoam
- Symantec AntiVirus
- Symantec AntiVirus Definition Watcher
- Symantec Event Manager
- Symantec Network Drivers Service
- Symantec Network Proxy
- Symantec Secure Port
- Symantec Settings Manager
To stop the services
- On the Windows taskbar, click Start > Run.
- In the Open box, type the following text:
services.msc
- Click OK.
- For each of the following services, right-click the name of the service, and then click Stop:
- SAVRoam
- Symantec AntiVirus
- Symantec AntiVirus Definition Watcher
- Symantec Event Manager
- Symantec Network Drivers Service
- Symantec Network Proxy
- Symantec Secure Port
- Symantec Settings Manager
Remove Symantec Client Security from the registry
Most of the items that you must remove are entries in the Windows registry.
Note: You must have administrator permissions (read and write) to edit the registry.
WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.
For instructions, see
How to back up the Windows registry.
To remove Symantec Client Security from the registry
- On the Windows taskbar, click Start > Run.
- In the Open box, type the following text:
regedit
- Click OK.
- In the Windows Registry Editor, in the left pane, go to the following key:
HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
- In the left pane, right-click LDVPMenu, and then click Delete.
- Expand the following key:
HKEY_CLASSES_ROOT\Installer\Features
This key contains many <Package Code> keys.
- Click each <Package Code> key, and look in the right pane for references to SAVMain and to SCFMain.
If you see any references to SAVMain or to SCFMain in the right pane, then delete the entire <Package Code> key.
- Expand the following key:
HKEY_CLASSES_ROOT\Installer\Products
This key contains many <Package Code> keys.
- Click each <Package Code> key, and look in the right pane for references to Symantec Client Security.
If you see any references to Symantec Client Security in the right pane, then delete the entire <Package Code> key.
- Expand the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products
This key contains many <Package Code> keys.
- Expand each <Package Code> key, and then click the InstallProperties key.
If you see any references to Symantec Client Security in the right pane, then delete the entire <Package Code> key.
- Expand the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
This key contains many <Package Code> keys.
- Click each <Package Code> key, and look in the right pane for references to Symantec Client Security.
If you see any references to Symantec Client Security in the right pane, then delete the entire <Package Code> key.
- Delete the following keys:
- HKEY_CLASSES_ROOT\Installer\UpgradeCodes\E761730C408BDBC4D825D7A248EB45F3
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\E761730C408BDBC4D825D7A248EB45F3
- HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage\VP6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\E761730C408BDBC4D825D7A248EB45F3
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\CCPD
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\IDS
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\PatchInst
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SecurePort
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SPBBC
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec AntiVirus
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SymNetDrv
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\System\SAVRT
- Expand the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features
This key contains many <Package Code> keys.
- Click each <Package Code> key, and look in the right pane for references to SAVMain and to SCFMain.
If you see any references to SAVMain or to SCFMain in the right pane, then delete the entire <Package Code> key.
- Expand the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products
This key contains many <Package Code> keys.
- Click each <Package Code> key, and look in the right pane for references to Symantec Client Security.
If you see any references to Symantec Client Security in the right pane, then delete the entire <Package Code> key.
- Click the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- In the right pane, delete the vptray value.
- Click the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps
- In the right pane, delete the following values:
- AdBlocking
- AVENGEDEFS
- Common Client
- Common Client Data
- Common Client Decomposers
- ConfigWizard
- NAVNT
- SCS Install Directory
- SAVCE
- SPBBC
- SymNetDrv
- VP6ClientInstalled
- VP6UsageCount
- Expand the following key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
- Delete the following subkeys:
- ccEvtMgr
- ccSetMgr
- ccProxy
- DefWatch
- NAVENG
- NAVEX15
- SavRoam
- SAVRT
- SAVRTPEL
- SNDSrvc
- SPBBCDrv
- SPBBCSvc
- Symantec AntiVirus
- SYMREDRV
- SYMTDI
- SYMFW
- Expand the following key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
- Delete the following subkeys:
- ccEvtMgr
- ccProxy
- ccSetMgr
- DefWatch
- LiveUpdate
- SavRoam
- SNDSrvc
- SPBBCSvc
- Symantec AntiVirus
- In the left pane, click My Computer.
- On the Edit menu, click Find.
- In the Find what box, type the following text:
VirusProtect6
Delete all keys and values that contain this string.
- In the left pane, click My Computer.
- On the Edit menu, click Find.
- In the Find what box, type the following text:
vpshell2.dll
Delete all keys and values that contain this string.
WARNING: Follow the next four steps only if the conditions that are described in the steps are met. These instructions affect registry entries that other Symantec products use. If you delete a key or value that another Symantec product uses, that product must be removed and installed again.
- If no other Symantec application that uses virus definitions is installed, then delete the following key:
HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs
- If Symantec Client Security is the only Symantec program that is installed, go to the following key:
HKEY_CLASSES_ROOT\CLSID
Delete all of the {E381F1E0-910E-11D1-AB1E-00A0C90F8F6F} subkeys.
- If Symantec Client Security is the only Symantec program that is installed, delete the following keys:
- HKEY_LOCAL_MACHINE\Software\Symantec\Common Client
- HKEY_LOCAL_MACHINE\Software\Symantec\SymEvent
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\AMSUsageCount
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\IDS
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\Internet Security
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\Internet Security Data
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\Savrt
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\Shared Options
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\Symantec Shared Directory
- HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps\SymcData-scfidsdefs
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymEvent
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymIDS
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymIDSCo
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymNDIS
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymSecurePort
- If Symantec Client Security is the only Symantec program that is installed, go to the following key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- In the right pane, delete the ccApp value.
- Restart the computer.
Remove Symantec Client Security from the Start menu and from the hard drive
After Symantec Client Security is disabled, you need to remove leftover files and shortcuts to the program.
To remove Symantec Client Security from the Start menu
- On the Windows taskbar, right-click Start, and then click Open All Users.
- Double-click Programs.
- Right-click Symantec Client Security, and then click Delete.
- Exit Windows Explorer.
To remove Symantec Client Security from the hard drive
- On the Windows taskbar, click Start > Programs > Accessories > Windows Explorer.
- Open the Program Files folder.
- Right-click the Symantec Client Security folder, and then click Delete.
WARNING: Follow the next two steps only if the conditions that are described in the steps are met. These instructions affect registry entries that other Symantec products use. If you delete a key or value that another Symantec product uses, that product must be removed and installed again.
- If Symantec Client Security is the only Symantec product on your computer, delete the Symantec folder.
- Open the following folder:
Program Files\Common Files\Symantec Shared
- If Symantec Client Security is the only Symantec product on your computer, delete the following folders:
- AdBlocking
- Decomposers
- Help
- IDS
- Options
- SPBBC
- SPManifests
- SSC
- SymcData
- VirusDefs
- Open the following folder:
C:\Documents and Settings\All Users\Application Data\Symantec
- Delete the following folders:
- Common Client
- Symantec AntiVirus Corporate Edition
- Symantec Client Firewall
- Exit Windows Explorer.
Document ID: 2006030611404948
Last Modified: 01/02/2007
Date Created: 03/06/2006
Operating System(s): Windows 2000, Windows XP Home, Windows XP Professional Edition
Product(s): Symantec AntiVirus 10.1, Symantec Client Security 3.1
Release(s): Symantec AntiVirus 10.1 [All Releases], Symantec Client Security 3.1 [All Releases]