Search

All of Symantec All of Symantec Support Viruses & Risks Home & Home Office Small Business Enterprise Partners VERITAS

Question/Issue:
This document describes how to manually uninstall Symantec Endpoint Protection Manager.


Solution:
To stop the Symantec Endpoint Protection Manager Services

1. Click Start > Run.
2. Type services.msc and click OK.
3. Find and stop the following services. To stop the service, right click on the service and select Stop
   • Symantec Embedded Database
   • Symantec Endpoint Protection Manager
   • World Wide Web Publishing Service

To clean up IIS
Open the Internet Information Services (IIS) Manager by going to Start > Settings > Control Panel > Administrative Tools > Internet Information Services (IIS) Manager.
If you are using the Default Website, delete the following listed under Default Website

• ClientPackages
• Content
• Reporting
• Secars
• Secreg

If you are using a custom web site

• Select the site named 'Symantec Web Server' and select delete.

WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify or delete only the registry keys that are specified.
For instructions, see How to back up the Windows registry.

Note: You must have administrator permissions (read and write) to edit the registry.

To remove Symantec Endpoint Protection Manager from the registry

1. Run the Windows Installer Cleanup Utility to remove Symantec Endpoint Protection Manager 11.0.
   The Windows Installer Cleanup Utility can be found at the following URL:
   http://support.microsoft.com/default.aspx?scid=kb;en-us;290301
   
   Notes:
   After removing Symantec Endpoint Protection Manager via the Windows Installer Cleanup Utility:
   - Symantec Endpoint Protection Manager does not appear in Add/Remove Programs.
   - Symantec Endpoint Protection Manager services are still present.
   - Symantec Endpoint Protection Manager may still be operational.
   
2. Click Start > Run.
3. Type regedit and click OK.
4. In the Windows registry editor, in the left pane, delete the following keys. If an entry is not present, skip to the next one.
   • HKEY_CLASSES_ROOT\ASAEnum
   • HKEY_CLASSES_ROOT\ASAEnum.90
   • HKEY_CLASSES_ROOT\ASAErrorLookup
   • HKEY_CLASSES_ROOT\ASAErrorLookup.90
   • HKEY_CLASSES_ROOT\ASAProv
   • HKEY_CLASSES_ROOT\ASAProv.90
   • HKEY_CLASSES_ROOT\pmem2.MachineInfo2
   • HKEY_CLASSES_ROOT\pmem2.MachineInfo2.1
   • HKEY_CLASSES_ROOT\SesmLu.SesmLu
   • HKEY_CLASSES_ROOT\SesmLu.SesmLu.1
   • HKEY_CLASSES_ROOT\AppID\{8865322D-9384-44DA-ABEA-496D7268D42D}
   • HKEY_CLASSES_ROOT\AppID\pmem2.DLL
   • HKEY_CLASSES_ROOT\CLSID\{41DFE9EB-DB91-11D2-8C43-006008D26A6F}
   • HKEY_CLASSES_ROOT\CLSID\{41DFE9EC-DB91-11D2-8C43-006008D26A6F}
   • HKEY_CLASSES_ROOT\CLSID\{41DFE9ED-DB91-11D2-8C43-006008D26A6F}
   • HKEY_CLASSES_ROOT\CLSID\{530DF3AD-6936-3214-A83B-27B63C7997C4}
   • HKEY_CLASSES_ROOT\CLSID\{58CC9977-FED2-4D80-AD07-878E5B5CB783}
   • HKEY_CLASSES_ROOT\CLSID\{EEA83A9F-D390-4D4E-8796-464E79337FE1}
   • HKEY_CLASSES_ROOT\Installer\Features\66FEC14977D4DC44689F98CFA64C2B99
   • HKEY_CLASSES_ROOT\Installer\Products\66FEC14977D4DC44689F98CFA64C2B99
   • HKEY_CLASSES_ROOT\Installer\UpgradeCodes\BF9DACEA0693B5347B6760F9F875BF10
   • HKEY_CLASSES_ROOT\Interface\{58CC9977-FED2-4D80-AD07-878E5B5CB783}
   • HKEY_CLASSES_ROOT\TypeLib\{24F77A0F-F72E-440F-A8F8-CC2B975D1EF5}
   • HKEY_CLASSES_ROOT\TypeLib\{F63F561C-EB82-4E54-B81C-BE1757406EF9}
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{941CEF66-4D77-44CD-86F9-89FC6AC4B299}
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BF9DACEA0693B5347B6760F9F875BF10
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\66FEC14977D4DC44689F98CFA64C2B99
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{941CEF66-4D77-44CD-86F9-89FC6AC4B299}
   • HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs\SymcData-sesmvirdef32
   • HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs\SymcData-sesmvirdef64
   • HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs\SymcData-sesmips32
   • HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs\SymcData-sesmips64
   • HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\SEPM
     
5. Navigate to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
6. Click the Folders key to select it.
7. Remove any values with "C:\Program Files\Symantec\Symantec Endpoint Protection Manager" in the path.
8. Still in the Folders key, in the right pane find and delete the entry C:\WINDOWS\Installer\{941CEF66-4D77-44CD-86F9-89FC6AC4B299}
9. Navigate to the following key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs
10. Click the SharedDLLs to select it.
11. Remove any values with "C:\Program Files\Symantec\Symantec Endpoint Protection Manager" in the path.
12. Navigate to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps\
13. Delete the following under this key:
    • Reporting
    • SesmContent
    • SymcData-sesmvirdef32
    • SymcData-sesmvirdef64
    • SymcData-sesmips32
    • SymcData-sesmips64
14. Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
15. Delete the following under this key:
    • Adaptive_Server_Anywhere_9
    • ASANYs_sem5
    • semsrv
16. Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application
17. Delete the following under this key:
    • ASANYs_sem5
    • Secars
    • SemSrv
18. Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services
19. Delete the following under this key:
    • Adaptive_Server_Anywhere_9
    • ASANYs_sem5
    • semsrv
20. Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\Application
21. Delete the following under this key:
    • ASANYs_sem5
    • Secars
    • SemSrv
22. Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
23. Delete the following under this key:
    • Adaptive_Server_Anywhere_9
    • ASANYs_sem5
    • semsrv
24. Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
25. Delete the following under this key:
    • ASANYs_sem5
    • Secars
    • SemSrv

To remove Symantec Endpoint Protection files and folders:
Delete the following files and folders. If a file or folder is not present, move on to the next one.

• C:\Windows\Installer\{941CEF66-4D77-44CD-86F9-89FC6AC4B299} (Note: "Installer" is a hidden system folder.)
• C:\Program Files\Symantec\Symantec Endpoint Protection Manager\
• C:\Documents and Settings\All Users\Start Menu\Programs\Symantec Endpoint Protection Manager

If Symantec Endpoint Protection was installed on a 64-bit computer, delete the following folder:

• C:\Program Files(x86)\Symantec\Symantec Endpoint Protection Manager
  

Browse to C:\Program Files\Common Files\Symantec Shared\SymcData

• Delete any folder that starts with SESM (IE sesmvirdef32)

To start the World Wide Web Publishing Service

1. Click Start > Run.
2. Type services.msc and click OK.
3. Right click World Wide Web Publishing Service, and select Start World Wide Web Publishing Service.

References:
This document is available in the following languages:

• Brazilian-Portuguese: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/br_docid/20080227135639935
• French: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/fr_docid/20080229145108935
• German: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/de_docid/20080229145132935
• Italian: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/it_docid/20080229145156935
• Spanish: http://service1.symantec.com/SUPPORT/INTER/ent-securityintl.nsf/es_docid/20080227135723935

 

Document ID: 2007101615023748
Last Modified: 11/12/2009
Date Created: 10/16/2007
Operating System(s): Windows Server 2003 Web/Standard/Enterprise/Datacenter Edition
Product(s): Endpoint Protection 11
Release(s): Endpoint Protection 11 [All Releases], Endpoint Protection 11.0

Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements