Manually uninstalling the Symantec AntiVirus client

Unfortunately, sometimes the Symantec Antivirus client does not uninstall cleanly.  If you have to remove it manually, it's quite tedious, but the steps are below.


Manual removal of the Symantec AntiVirus client manually involves the following three basic steps:

• Stop Symantec AntiVirus services and processes

• Remove Symantec AntiVirus from the registry

• Remove Symantec AntiVirus from the Start menu and the hard drive



Stop Symantec AntiVirus services and processes

Ensure that the Symantec AntiVirus window is not open and is not currently running.



To stop the services

1. On the Windows Taskbar, click Start > Run.

2. In the Open box, type the following text:

services.msc

3. Click OK.

4. For each of the following services, right-click the name of the service, and click Stop:

• SAVRoam

• Symantec AntiVirus

• Symantec AntiVirus Definition Watcher

• Symantec Event Manager

• Symantec Settings Manager



To stop the processes

1. Press Ctrl+Alt+Del.

2. Click Task Manager.

3. In Windows Task Manager, on the Processes tab, right-click the name of the service, and click End Process, for each of the following processes:

• ccApp.exe

• VPTray.exe

4. Close the Windows Task Manager.





Remove Symantec AntiVirus from the registry

Most of the items that you must remove are entries in the Windows registry.

________________________________________

Note: You must have administrator permissions (read and write) to edit the registry.

________________________________________





To remove Symantec AntiVirus from the registry

1. On the Windows taskbar, click Start > Run.

2. In the Open box, type the following text:



regedit

3. Click OK.

4. In the Windows Registry Editor, in the left pane, go to the following key:



HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers

5. In the right pane, right-click LDVPMenu, and then click Delete.

6. Go to the following key:



HKEY_LOCAL_MACHINE\SOFTWARE\Symantec

7. Delete the following keys:

• SPBBC

• Symantec AntiVirus

• SymNetDrv

8. Delete all of the following registry keys that exist:

• HKEY_CLASSES_ROOT\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D

• HKEY_CLASSES_ROOT\Installer\Features\0DE336A57D5E56D4BAD835DE34152048

• HKEY_CLASSES_ROOT\Installer\Products\0DE336A57D5E56D4BAD835DE34152048

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\0DE336A57D5E56D4BAD835DE34152048

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\0DE336A57D5E56D4BAD835DE34152048

• HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage\VP6

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20A7FB42A06BB49448A397B3CB77ED4D

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0DE336A57D5E56D4BAD835DE34152048

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vptray

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3E071930-C254-482A-B79B-722703FFAA9E}

9. Go to the following key:



HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps

10. Delete the following values:

• AVENGEDEFS

• Common Client

• Common Client Data

• Common Client Decomposers

• NAVNT

• SAV Install Directory

• SAVCE

• SPBBC

• SymNetDrv

• VP6ClientInstalled

• VP6UsageCount

11. Go to the following key:



HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services

12. Delete the following keys:

• ccEvtMgr

• ccSetMgr

• ccPwdSvc

• DefWatch

• NAVENG

• NAVEX15

• SavRoam

• SAVRT

• SAVRTPEL

• SNDSrvc

• SPBBCDrv

• SPBBCSvc

• Symantec AntiVirus

• SYMREDRV

• SYMTDI

13. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the same entries as under CurrentControlSet\Services above.

14. Go to the following key:



HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application

15. Delete the following entries:

• Defwatch

• ccEvtMgr

• ccProxy

• ccSetMgr

• LiveUpdate

• SavRoam

• Symantec AntiVirus

16. Go to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System, and delete the SAVRT value.

17. Go to any existing "ControlSet*"\Services\EventLog\Application and "ControlSet*"\Services\EventLog\System keys and delete the same entries like in the previous four steps.

18. In the left pane, click My Computer.

19. On the Edit menu, click Find.

20. Search for VirusProtect6.

Delete all keys and values that contain this string.

21. In the left pane, click My Computer.

22. On the Edit menu, click Find.

23. Search for 0DE336A57D5E56D4BAD835DE34152048.

Delete all keys and values that contain this string.

________________________________________

WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect registry entries that are used by other Symantec products. If you delete a key or value that is used by another Symantec product, that product must be removed and installed again.

________________________________________



24. If no other Symantec applications that use virus definitions are installed, go to the following key:



HKEY_LOCAL_MACHINE\Software\Symantec

25. Delete the SharedDefs value.

26. If Symantec AntiVirus is the only Symantec program installed, delete the following keys:

• Common Client

• SymEvent

27. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the ccApp key.

28. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services, and delete the SymEvent key.

29. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the SymEvent keys.

30. Restart the computer.



Symantec AntiVirus is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.





Remove Symantec AntiVirus from the Start menu and the hard drive

After Symantec AntiVirus is disabled, all that remains is to remove leftover files and shortcuts to the program.



To remove Symantec AntiVirus from the Start menu

1. On the Windows taskbar, right-click Start, and then click Open All Users.

2. Double-click Programs.

3. Right-click Symantec AntiVirus, and then click Delete.





To remove Symantec AntiVirus from the hard drive

1. On the Windows taskbar, click Start > Programs > Windows Explorer.

2. Open the Program Files folder.

3. Right-click Symantec AntiVirus, and then click Delete.

________________________________________

WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect files and folders that are used by other Symantec products. If you delete a file or folder that is used by another Symantec product, that product must be removed and installed again.

________________________________________



4. If Symantec AntiVirus is the only Symantec product on your computer, delete the Symantec folder.

5. Open the following folder:



Program Files\Common Files\Symantec Shared

6. If Symantec AntiVirus is the only Symantec product on your computer, delete the following folders:

• Decomposers

• SPBBC

• SPManifests

• SSC

• VirusDefs

7. Go to the following folder:



C:\Documents and Settings\All Users\Application Data\Symantec

8. Delete the following folders:

• Symantec AntiVirus Corporate Edition

• Common Client

9. Exit Windows Explorer.