Symantec.com
Partners
About Symantec
cartShopping
WelcomeProductsViruses & RisksSupportDownloadsStore
Home & Home Office
Symantec.com > Home & Home Office > Support > Knowledge Base


PRINT THIS SOLUTION PRINT THIS SOLUTION

RATE THIS SOLUTION RATE THIS SOLUTION

How to manually uninstall Norton SystemWorks 2002 or 2003 from Windows XP

Situation:
This document explains how to manually uninstall Norton SystemWorks (NSW) from a Windows XP computer.

Solution:
This document provides the comprehensive manual method for uninstalling Norton SystemWorks (NSW) when it is installed under Windows XP. NSW includes the point products Norton AntiVirus (or Norton AntiVirus Professional), Norton Internet Security (or Norton Internet Security Professional), Norton Utilities, Norton CleanSweep, and Web Tools.

Use this document when you want to remove only NSW and its point products and the Add/Remove Programs failed to fully remove them. Use this method as a last resort. It involves manually deleting files and editing the Windows registry.

Note:

This document contains the following sections:
Preparation Part 1 - How to stop NSW services
Part 2 - How to remove NAV 2003
Part 3 - How to remove NSW from the registry Part 4 - How to remove NSW scheduled tasks
Part 5 - How to remove NSW files
  1. Remove the NSW shortcut icon from the Desktop
  2. To remove NSW programs from the Start menu
  3. Remove the NSW folders
Part 6 - Restart the computer


Preparation
Before using the procedures in this document, read the following sections to determine whether there are any exceptions that apply to your situation.

Which NSW versions you can use this document with
This document is written specifically for NSW 2003 Standard and Professional Editions. If you use this document for NSW 2002, note that some of the registry entries may be different from those listed here. This difference may result in an incomplete uninstall for NSW 2002. In many cases, though, the following procedure might still resolve the original problem that caused you to uninstall NSW 2002.

Information about avoiding problems when you have other Symantec products installed
When you have other Symantec products installed (in addition to NSW and its component products), performing the following procedures may prevent those programs from functioning properly. This problem exists because many Symantec products share some of the same files and registry entries. Removing all files and entries for one product may result in removing files that are used by another product.

To avoid this problem, determine whether NSW and its point products are the only products on the computer. If you have NSW bonus products or other Symantec products installed, take note in the following procedures when you see differing instructions. When given a choice between two options, ensure that you choose the option that describes your situation. List of NSW bonus products
NSW bonus products include WinFax, Norton Ghost, and GoBack.

Information about removing all Symantec products
Remove all Symantec products in either of the following situations:
If you want to remove all Symantec products, use the Add/Remove Programs applet in the Windows Control Panel to remove the bonus products and other Symantec products, and then use this document to remove NSW and its point products.

If you are uninstalling GoBack 3.x Personal Edition (installed from the NSW CD), read the document How to uninstall GoBack.

Information about removing only the bonus products or other Symantec products
This document does not provide instructions for removing the bonus products and other Symantec products. If you want to remove only the bonus products or the other Symantec products, do not use this document. Instead, use the Add/Remove Programs applet in the Windows Control Panel to remove those products.

If you are uninstalling GoBack 3.x Personal Edition (installed from the NSW CD), read the document How to uninstall GoBack.


Part 1 - How to stop NSW services

To stop NSW services
  1. Click Start > Control Panel.
  2. Open the Services dialog box:
    • If you are using Classic View, click Administrative Tools, and then click Services.
    • If you are not using Classic View:
      1. Click Performance and Maintenance under the heading "Pick a category,"
      2. Click Administrative Options under Pick a Control Panel Icon, and then click Services
  3. Select each of the following services, click Stop, and then click Yes.

    Norton Unerase Protection
    Norton AntiVirus Auto-Protect service
    Ghost Start Service for NSW 2003
    Script Blocking Service
    Speed Disk Service
    Symantec Event Manager
    Symantec Password Validation Service
  4. Close the Services window.
  5. Press Ctrl+Alt+Delete, click Task Manager, and then click the Processes tab.
  6. Select each of the following services, click End Process, and then click Yes.

    Navapw32.exe
    GhostStartService.exe
    GhostStartTrayApp.exe
  7. If you are removing all Symantec programs from the computer, select CCApp.exe, click End Process, and then click Yes.


Part 2 - How to remove NAV 2003
If you previously installed Norton AntiVirus 2003 (this program is included as part of the Norton SystemWorks suite), run the Rnav2003.exe removal utility to ensure that all components of NAV 2003 and earlier have been uninstalled.

Part 3 - How to remove NSW from the registry
This section provides two sets of steps for removing NSW from the Windows registry. Use the NSW instructions that apply to your situation, and then restore the Recycle Bin registry keys:

WARNING: We strongly recommend that you back up the Windows registry before making any changes to it. Incorrect changes to the registry may result in permanent data loss or corrupted files. Modify only the keys that are specified. See the document How to make a backup of the Windows registry before proceeding.

To remove all NSW registry entries (no other Symantec products are installed)
  1. Click Start > Run.
  2. Type regedit and then click OK. The Registry Editor opens.
  3. Navigate to and delete the following keys:

    Note: This process may be easier if you first copy the following text to a file on your computer so that you may use a cut and paste process to search for specific entries. Alternatively, print this document and mark off each entry on the paper after you have removed the entry from the registry.

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu
    HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu
    HKEY_CLASSES_ROOT\Installer\Features\018E5796F29C0F54B0DF81B713F2018E
    HKEY_CLASSES_ROOT\Installer\Features\238D3C3469CAA3640230B1D8B1AF5232
    HKEY_CLASSES_ROOT\Installer\Features\3415DD85714434F47ADDB5B892ECBDAE
    HKEY_CLASSES_ROOT\Installer\Features\47897D8CB2F76434991FAD8AAAFBD9AC
    HKEY_CLASSES_ROOT\Installer\Features\C8D617F6F8933D11581E000540386890
    HKEY_CLASSES_ROOT\Installer\Products\018E5796F29C0F54B0DF81B713F2018E
    HKEY_CLASSES_ROOT\Installer\Products\238D3C3469CAA3640230B1D8B1AF5232
    HKEY_CLASSES_ROOT\Installer\Products\3415DD85714434F47ADDB5B892ECBDAE
    HKEY_CLASSES_ROOT\Installer\Products\47897D8CB2F76434991FAD8AAAFBD9AC
    HKEY_CLASSES_ROOT\Installer\Products\C8D617F6F8933D11581E000540386890
    HKEY_CURRENT_USER\SOFTWARE\Symantec
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{43C3D832-AC96-463A-2003-1B8D1BFA2523}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{58DD5143-4417-4F43-A7DD-5B8B29CEDBEA}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6975E810-C92F-45F0-0BFD-187B312F10E8}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C8D79874-7F2B-4346-99F1-DAA8AABF9DCA}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton CleanSweep
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LiveReg
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LiveUpdate
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton Speed Disk
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton Utilities
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ccEvtMgr
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ccPwdSvc
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GhostStartService
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GhPciScan
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\navapsvc
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NAVENG
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NAVEX15
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NPDriver
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NprotectService
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QDFSDRV
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVRT
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVRTPEL
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SBService
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Speed Disk service
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymEvent
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymRedrv
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Symtdi
  4. Remove the Run values:
    1. Navigate to the following key:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    2. Delete the following values from the pane on the right:

      ccApp
      ccRegVfy
      GhostStartTrayApp
      SymTray - Norton SystemWorks

      If uninstalling NSW 2002, also delete the value NAV Agent

To remove most NSW registry entries (remove only NSW entries that are not used by other Symantec programs):
  1. Click Start > Run.
  2. Type regedit and then click OK. The Registry Editor opens.
  3. Navigate to and delete the following keys:

    HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu  
    HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu  
    HKEY_CLASSES_ROOT\Installer\Features\018E5796F29C0F54B0DF81B713F2018E
    HKEY_CLASSES_ROOT\Installer\Features\238D3C3469CAA3640230B1D8B1AF5232
    HKEY_CLASSES_ROOT\Installer\Features\3415DD85714434F47ADDB5B892ECBDAE
    HKEY_CLASSES_ROOT\Installer\Features\47897D8CB2F76434991FAD8AAAFBD9AC
    HKEY_CLASSES_ROOT\Installer\Features\C8D617F6F8933D11581E000540386890
    HKEY_CLASSES_ROOT\Installer\Products\018E5796F29C0F54B0DF81B713F2018E
    HKEY_CLASSES_ROOT\Installer\Products\238D3C3469CAA3640230B1D8B1AF5232
    HKEY_CLASSES_ROOT\Installer\Products\3415DD85714434F47ADDB5B892ECBDAE
    HKEY_CLASSES_ROOT\Installer\Products\47897D8CB2F76434991FAD8AAAFBD9AC
    HKEY_CLASSES_ROOT\Installer\Products\C8D617F6F8933D11581E000540386890
    HKEY_CURRENT_USER\SOFTWARE\Symantec\Fast & Safe
    HKEY_CURRENT_USER\SOFTWARE\Symantec\Norton AntiVirus  
    HKEY_CURRENT_USER\SOFTWARE\Symantec\Norton Ghost
    HKEY_CURRENT_USER\SOFTWARE\Symantec\Norton SystemWorks
    HKEY_CURRENT_USER\SOFTWARE\Symantec\Norton Utilities
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{43C3D832-AC96-463A-2003-1B8D1BFA2523}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{58DD5143-4417-4F43-A7DD-5B8B29CEDBEA}  
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6975E810-C92F-45F0-0BFD-187B312F10E8}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C8D79874-7F2B-4346-99F1-DAA8AABF9DCA}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton CleanSweep
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton Speed Disk
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton Utilities
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton AntiVirus  
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton CleanSweep
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton CleanSweep Deluxe
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton Ghost
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton Speed Disk
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton SystemWorks
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton Utilities
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\ProcessViewer
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\ScriptBlocking  
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Speed Disk
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symevent\NAV  
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symevent\Norton Utilities
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symevent\VDD\NAV  
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symevent\VDD\Norton Utilities
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symtray\Norton SystemWorks
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\WebCleanup
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GhostStartSevice
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GhPciScan
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\navapsvc  
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NAVENG  
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NAVEX15  
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NPDriver
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NprotectService
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QDFSDRV
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVRT  
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVRTPEL
    KEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SBService  
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Speed Disk service
  4. Remove the InstalledApps values:
    1. Navigate to the following key:

      HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps
    2. Delete the following values from the pane on the right:

      AVENGEDEFS
      NAV
      NAVNT
      Norton CleanSweep
      Norton Ghost
      Norton SystemWorks
      Norton Utilities
      SDNT

      Note: If you installed WinFax Professional, then do not delete the item WINFAX.
  5. Remove the Run values:
    1. Navigate to the following key:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    2. Delete the following values from the pane on the right:

      GhostStartTrayApp
      SymTray - Norton SystemWorks

      Note: If uninstalling NSW 2002, also delete the value NAV Agent.

To restore the Recycle Bin registry key
  1. Navigate to the following key:

    HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}
  2. Double-click the (Default) value in the pane on the right. The Edit String window opens.
  3. Type Recycle Bin and then press Enter.
  4. Double-click the value Localized String The Edit String dialog box opens.
  5. Type Recycle Bin and press Enter.
  6. Navigate to and delete the following key:

    HKEY_CLASSES_ROOT\CLSID\{645FF040 - 5081 - 101B - 9F08 - 00AA002F954E}\Shell
  7. Close the registry.


Part 4 - How to remove NSW scheduled tasks
  1. Click Start > Programs > Accessories > System Tools, and then click Scheduled Tasks.
  2. Delete the following items:

    Norton AntiVirus- Scan my computer
    Norton SystemWorks One Button Checkup
    Symantec Net Detect
  3. Close the window.


Part 5 - How to remove NSW files
Perform each of the following procedures:

Remove the NSW shortcut icon from the Desktop
Right-click the Norton SystemWorks icon on the desktop, and then click Delete.

To remove NSW programs from the Start menu
  1. Right-click Start, and then click Open All Users. The Start Menu window appears.
  2. Right-click the Norton SystemWorks shortcut, and then click Delete.
  3. Double-click the Programs folder.
  4. Right-click the Norton SystemWorks folder, and then click Delete

Remove the NSW folders
In the following steps, if Windows does not permit you to delete a folder, delete the files that are in the folder and then continue with the next item. Note that Windows might not permit you to delete all the files in the folder. If so, delete the files that you can, and then continue with the next item.

To remove the folders
  1. Configure Windows to display hidden files.
  2. Click Start > All Programs, > Accessories > Windows Explorer.
  3. If you installed NSW to a location other than the default, then you must delete those folders. Otherwise, delete the following default folder:

    C:\Program Files\Norton SystemWorks

    With NSW 2003, if you cannot delete the SystemWorks folder from Program Files, you will see the error message "Defalert.dll is protected and cannot be deleted." With NSW 2002, you will see the error message "Cannot delete NAVShExt.dll: access is denied."
  4. Delete some or all of the remaining Symantec folders:
    1. If you have no other Symantec products on the computer, then you may delete the following folders:

      C:\Program Files\Symantec
      C:\Program Files\Common Files\Symantec Shared
      C:\Documents and Settings\All Users\Application Data\Symantec
    2. If you have other Symantec products on the computer, then you may delete the following folders:

      C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus
      C:\Documents and Settings\All Users\Application Data\Symantec\Ghost

      If you cannot delete the file Navshext.dll (which is in the Norton AntiVirus folder) follow the steps in the document Error: "Cannot delete navshext.dll . . ." when deleting the Norton AntiVirus 2002 program folder to unregister the file, and then delete the file.
  5. Close Windows Explorer.
  6. If you could not delete one or more of the files or folders listed in steps 1-3:
    1. Restart the computer.
    2. Repeat steps 1-3. When performing these steps, note which files or folders you still cannot delete.
    3. If you could not delete all indicated files and folders, repeat step 5 until all indicated files and folders are deleted. This process may take several restarts.


Part 6 - Restart the computer

To restart the computer
  1. Click Start, and then click Turn Off Computer. The Turn Off dialog box appears.
  2. Click Restart.

This concludes the manual uninstallation procedure for NSW.


References:
How to manually uninstall Norton SystemWorks 2002 or 2003 from Windows 98/Me
How to manually uninstall Norton SystemWorks 2002 or 2003 from Windows XP
How to uninstall Norton SystemWorks 2001 manually from Windows NT/2000
How to uninstall Norton SystemWorks 2000 or 2001 manually from Windows 95/98/Me
How to uninstall Norton SystemWorks 1.0 or 2.0 manually
How to uninstall individual components from Norton SystemWorks 2002
How to uninstall just one component of Norton SystemWorks

 

Available Translations:


RATE THIS SOLUTION
Was this solution helpful to you?
Yes
No
If any information was unclear, or the information you were seeking was not provided, please let us know. Your feedback will help us improve this service.

NOTE: Comments entered here will NOT recieve a personal email response.


Document ID: 2001075071641066
Last Modified: 06/29/2004
Date Created: 09/10/2001
Operating System(s): Windows XP
Product(s): Norton SystemWorks 2002


Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements
©1995 - 2009 Symantec Corporation