Ручное удаление Symantec AntiVirus Corporate Edition

[PIB]

Ситуация:
Этот документ описывает как вручную удалить Symantec AntiVirus Corporate Edition 9.0 server из Windows NT/2000/XP или Windows Server 2003 (32-bit).

Решение:
Удаление Symantec AntiVirus вручную состоит из следующих четырых базовых шагов:
• Остановка служб Symantec AntiVirus
• Удаление Symantec AntiVirus из реестра
• Удаление Symantec AntiVirus из меню "Пуск"
• Удаление Symantec AntiVirus с жесткого диска

Остановка служб Symantec AntiVirus
Остановите следующие сервисы перед чисткой реестра, меню Пуск и жесткого диска.
• Intel Alert Handler
• Intel Alert Originator
• Intel File Transfer
• Intel PDS
• Symantec AntiVirus
• Symantec AntiVirus Definition Watcher
Удаление Symantec AntiVirus из реестра
________________________________________
Заметка: Вы должны иметь полномочия администратора (чтение и запись) для редактирования реестра.
________________________________________

Сделайте следующие изменения в реестре:
1. Перейдите на следующий ключ:
HKEY_CLASSES_ROOT/*/shellex/ContextMenuHandlers
2. Удалите запись LDVPMenu.
3. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINESOFTWARE/Symantec
4. Удалите ключ Symantec AntiVirus.
5. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINE/SystemCurrentControlSet/Services
6. Удалите следующие записи:
• DefWatch
• NAVENG
• NAVEX15
• SAVRT
• SAVRTPEL
• Symantec AntiVirus
7. Удалите записи SymEvent только если кроме Symantec AntiVirus 9.0 нет других установленных программ Symantec.
8. Перейдите на все существующие ключи ControlSet/Services и удалите такие же записи как в пункте 6.
9. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINE/SystemCurrentControlSet/Services/EventLog/Application
10. Удалите следующие записи:
• Defwatch
• Symantec AntiVirus
11. Перейдите на слудующий ключ:
HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/EventLog/System
12. Удалите запись SAVRT.
13. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/lanmanserver/Shares/Security
14. Удалите следующие записи:
• VPHOME
• VPLOGON
15. Перейдите на все существующие ключи ControlSet/Services/EventLog/Application и удалите такие же записи как в пунктах с 9 по 14.
16. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINE/SOFTWARE/INTEL
17. Под ключом Intel раскройте ключ DllUsage и удалите ключ VP6.
________________________________________
ПРЕДУПРЕЖДЕНИЕ: Будьте осторожны, не удалите ключ Intel, потому что другие программы и оборудование могут использовать этот ключ.
________________________________________

18. В левой панеле перейдите в самый верх на "Мой компьютер", затем в меню "Правка" выберите "Найти...".
В поле для поиска введите "VirusProtect6" и удалите все найденные записи.
19. Снова перейдите на "Мой компьютер" и перейдите в поиск.
В поле для поиска введите "497CA84818B8A04418EA464733D75B72" и удалите все найденные записи.
________________________________________
ПРЕДУПРЕЖДЕНИЕ: Следующие 2 пункта выполняйте только, если на компьютере нет других приложений Symantec, использующих virus definitions. Если есть приложения, использующие virus definitions и ключ SharedDefs был удален, то их надо будет переустановить.
________________________________________

20. Если нет других приложений Symantec, которые используют virus definitions, перейдите на следующий ключ, иначе перейдите к пункту 22:
HKEY_LOCAL_MACHINE/Software/Symantec
21. Удалите запись SharedDefs.
22. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINE/SOFTWARE/Symantec/InstalledApps
23. Удалите следующие записи:
• VP6ClientInstalled
• VP6UsageCount
24. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall
25. Удалите следующий ключ:
{848AC794-8B81-440A-81AE-6474337DB527}
26. Перейдите на следующий ключ:
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run
27. Удалите запись Vptray.
28. Перезагрузите компьютер.
Теперь Symantec AntiVirus Corporate Edition server отключен, даже если другие следы его установки останутся в реестре. Эти следы не оказывают никакого влияния и нет необходимости их удалять.

Удаление Symantec AntiVirus из меню "Пуск"
1. Кликните правой кнопкой мыши на кнопке "Пуск" в таскбаре и выбирите в появившимся меню пункт "Открыть общее для всех меню" (Open All Users).
2. В открывшемся окне зайдите в папку "Программы" (Programs).
3. Найдите папку Symantec Client Security и удалите ее.
Если в этой папке есть другие программы Symantec, тогда открройте эту папку, и удалите только "Symantec AntiVirus Server".
Удаление Symantec AntiVirus с жесткого диска
1. Запустите Проводник.
2. Зайдите в папку "Program Files".
3. Удалите папку "SAV".
4. Удалите папку "Symantec AntiVirus".
________________________________________
ПРЕДУПРЕЖДЕНИЕ: Следующие 3 пункта выполняйте только, если на компьютере нет других приложений Symantec, использующих virus definitions. Если есть приложения, использующие virus definitions и ключ SharedDefs был удален, то их надо будет переустановить.
________________________________________

5. Если кроме Symantec AntiVirus больше нет других установленных программ Symantec на этом компьютере, удалите папку "Symantec".
6. Перейдите в папку "Program Files/Common Files/Symantec Shared".
7. Если кроме Symantec AntiVirus больше нет других установленных программ Symantec на этом компьютере, удалите папку "VirusDefs".
8. В зависимости от установленной операционной сиситемы перейдите в папку:
• Если Windows NT 4.0, то перейдите в следующую папку:
C:WinntProfilesAll UsersApplication DataSymantec
• Если 2000/XP/2003, то перейдите в следующую папку:
C:Documents and SettingsAll UsersApplication DataSymantec
9. Удалите папку "Symantec AntiVirus Corporate Edition".
10. Закройте Проводник.

Добавлено через 40 секунд
Manually uninstalling the Symantec AntiVirus 10.x client
Situation:
This document describes how to manually uninstall the Symantec AntiVirus 10.x client from Windows 2003/XP/2000.

Solution:

Manual removal of the Symantec AntiVirus client manually involves the following three basic steps:
• Stop Symantec AntiVirus services and processes
• Remove Symantec AntiVirus from the registry
• Remove Symantec AntiVirus from the Start menu and the hard drive

Stop Symantec AntiVirus services and processes
Ensure that the Symantec AntiVirus window is not open and is not currently running.

To stop the services
1. On the Windows Taskbar, click Start > Run.
2. In the Open box, type the following text:

services.msc
3. Click OK.
4. For each of the following services, right-click the name of the service, and click Stop:
• SAVRoam
• Symantec AntiVirus
• Symantec AntiVirus Definition Watcher
• Symantec Event Manager
• Symantec Settings Manager

To stop the processes
1. Press Ctrl+Alt+Del.
2. Click Task Manager.
3. In Windows Task Manager, on the Processes tab, right-click the name of the service, and click End Process, for each of the following processes:
• ccApp.exe
• VPTray.exe
4. Close the Windows Task Manager.


Remove Symantec AntiVirus from the registry
Most of the items that you must remove are entries in the Windows registry.
________________________________________
Note: You must have administrator permissions (read and write) to edit the registry.
________________________________________


To remove Symantec AntiVirus from the registry
1. On the Windows taskbar, click Start > Run.
2. In the Open box, type the following text:

regedit
3. Click OK.
4. In the Windows Registry Editor, in the left pane, go to the following key:

HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
5. In the right pane, right-click LDVPMenu, and then click Delete.
6. Go to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec
7. Delete the following keys:
• SPBBC
• Symantec AntiVirus
• SymNetDrv
8. Delete all of the following registry keys that exist:
• HKEY_CLASSES_ROOT\Installer\UpgradeCodes\20A7FB42A 06BB49448A397B3CB77ED4D
• HKEY_CLASSES_ROOT\Installer\Features\0DE336A57D5E5 6D4BAD835DE34152048
• HKEY_CLASSES_ROOT\Installer\Products\0DE336A57D5E5 6D4BAD835DE34152048
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Upgr adeCodes\20A7FB42A06BB49448A397B3CB77ED4D
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\0DE336A57D5E56D4BAD835DE34152048
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\0DE336A57D5E56D4BAD835DE34152048
• HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage\VP6
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App Management\ARPCache\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UpgradeCodes\20A7FB42A06BB494 48A397B3CB77ED4D
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Products\0DE336A57D5E56D4BAD835DE34152048
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\vptray
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{3E071930-C254-482A-B79B-722703FFAA9E}
9. Go to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps
10. Delete the following values:
• AVENGEDEFS
• Common Client
• Common Client Data
• Common Client Decomposers
• NAVNT
• SAV Install Directory
• SAVCE
• SPBBC
• SymNetDrv
• VP6ClientInstalled
• VP6UsageCount
11. Go to the following key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es
12. Delete the following keys:
• ccEvtMgr
• ccSetMgr
• ccPwdSvc
• DefWatch
• NAVENG
• NAVEX15
• SavRoam
• SAVRT
• SAVRTPEL
• SNDSrvc
• SPBBCDrv
• SPBBCSvc
• Symantec AntiVirus
• SYMREDRV
• SYMTDI
13. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the same entries as under CurrentControlSet\Services above.
14. Go to the following key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\EventLog\Application
15. Delete the following entries:
• Defwatch
• ccEvtMgr
• ccProxy
• ccSetMgr
• LiveUpdate
• SavRoam
• Symantec AntiVirus
16. Go to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\System, and delete the SAVRT value.
17. Go to any existing "ControlSet*"\Services\EventLog\Application and "ControlSet*"\Services\EventLog\System keys and delete the same entries like in the previous four steps.
18. In the left pane, click My Computer.
19. On the Edit menu, click Find.
20. Search for VirusProtect6.
Delete all keys and values that contain this string.
21. In the left pane, click My Computer.
22. On the Edit menu, click Find.
23. Search for 0DE336A57D5E56D4BAD835DE34152048.
Delete all keys and values that contain this string.
________________________________________
WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect registry entries that are used by other Symantec products. If you delete a key or value that is used by another Symantec product, that product must be removed and installed again.
________________________________________

24. If no other Symantec applications that use virus definitions are installed, go to the following key:

HKEY_LOCAL_MACHINE\Software\Symantec
25. Delete the SharedDefs value.
26. If Symantec AntiVirus is the only Symantec program installed, delete the following keys:
• Common Client
• SymEvent
27. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run and delete the ccApp key.
28. If Symantec AntiVirus is the only Symantec program installed, go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es, and delete the SymEvent key.
29. Under HKEY_LOCAL_MACHINE\System, go to any existing ControlSet*\Services keys and delete the SymEvent keys.
30. Restart the computer.

Symantec AntiVirus is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.


Remove Symantec AntiVirus from the Start menu and the hard drive
After Symantec AntiVirus is disabled, all that remains is to remove leftover files and shortcuts to the program.

To remove Symantec AntiVirus from the Start menu
1. On the Windows taskbar, right-click Start, and then click Open All Users.
2. Double-click Programs.
3. Right-click Symantec AntiVirus, and then click Delete.


To remove Symantec AntiVirus from the hard drive
1. On the Windows taskbar, click Start > Programs > Windows Explorer.
2. Open the Program Files folder.
3. Right-click Symantec AntiVirus, and then click Delete.
________________________________________
WARNING: Follow the next five steps only if the conditions described in the steps are met. These instructions affect files and folders that are used by other Symantec products. If you delete a file or folder that is used by another Symantec product, that product must be removed and installed again.
________________________________________

4. If Symantec AntiVirus is the only Symantec product on your computer, delete the Symantec folder.
5. Open the following folder:

Program Files\Common Files\Symantec Shared
6. If Symantec AntiVirus is the only Symantec product on your computer, delete the following folders:
• Decomposers
• SPBBC
• SPManifests
• SSC
• VirusDefs
7. Go to the following folder:

C:\Documents and Settings\All Users\Application Data\Symantec
8. Delete the following folders:
• Symantec AntiVirus Corporate Edition
• Common Client
9. Exit Windows Explorer.

Добавлено через 1 минуту
Manually uninstalling the Symantec AntiVirus 10.x server
Situation:
This document describes how to manually uninstall the Symantec AntiVirus 10.x server from Windows 2003/XP/2000.

Solution:
________________________________________
Before you begin: If if you have not backed up the pki structure of the server, you should back it up before you remove Symantec AntiVirus. To back up the pki structure, read the document Steps to minimize recovery time in the event of a server failure.
________________________________________


Removing Symantec AntiVirus client manually involves the following three basic steps:
• Stop Symantec AntiVirus services
• Remove Symantec AntiVirus from the registry
• Remove Symantec AntiVirus from the Start menu and from the hard drive

Ensure that the Symantec AntiVirus is not currently running.


Stop Symantec AntiVirus services
You must stop the following services before you remove items from the registry, the Start menu, or the hard drive.
• Intel PDS
• Symantec AntiVirus
• Symantec AntiVirus Definition Watcher
• Symantec Event Manager
• Symantec Settings Manager


To stop the services
1. On the Windows Taskbar, click Start > Run.
2. In the Open box, type the following text:

services.msc
3. Click OK.
4. For each of the following services, right-click the name of the service and click Stop:
• Intel PDS
• Symantec AntiVirus
• Symantec AntiVirus Definition Watcher
• Symantec Event Manager
• Symantec Settings Manager


Remove Symantec Client Security from the registry
Most of the items that you must remove are entries in the Windows registry.
________________________________________
Note: You must have administrator permissions (read and write) to edit the registry.
________________________________________


To remove Symantec Client Security from the registry
1. On the Windows taskbar, click Start > Run.
2. In the Open box, type the following text:

regedit
3. Click OK.
4. In the Windows registry editor, in the left pane, go to the following key:

HKEY_CLASSES_ROOT\*\Shellex\ContextMenuHandlers
5. In the right pane, right-click LDVPMenu, and then click Delete.
6. Delete the following keys:
• HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\DllUsage\VP6
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\vptray
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}
• HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SPBBC
• HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec AntiVirus
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\EventLog\System\SAVRT
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\Lanmanserver\Shares\Security\VPHOME
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\Lanmanserver\Shares\Security\VPLOGON
7. Go to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps
8. In the right pane, delete the following values:
• AMSUsageCount
• AVENGEDEFS
• Common Client
• Common Client Data
• Common Client Decomposers
• NAVNT
• SAV Install Directory
• SAVCE
• SPBBC
• Symantec Shared Directory
• VP6ClientInstalled
• VP6UsageCount
9. Go to the following key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es
10. Delete the following keys:
• ccEvtMgr
• ccPwdSvc
• ccSetMgr
• DefWatch
• NAVENG
• NAVEX15
• SAVRT
• SAVRTPEL
• SPBBCDrv
• SPBBCSvc
• Symantec AntiVirus
11. Go to the following key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\EventLog\Application
12. Delete the following keys:
• DefWatch
• Symantec AntiVirus
• SPBBCSvc
• ccEvtMgr
• ccSetMgr
13. In the left pane, click My Computer.
14. On the Edit menu, click Find.
15. Search for VirusProtect6.
Delete all keys and values that contain this string.
16. In the left pane, click My Computer.
17. On the Edit menu, click Find.
18. Search for the following string:

0DE336A57D5E56D4BAD835DE34152048

Delete all keys and values that contain this string.
________________________________________

WARNING: Follow the next four steps only if the conditions that are described in the steps are met. These instructions affect registry entries that are used by other Symantec products. If you delete a key or value that is used by another Symantec product, that product must be removed and installed again.
________________________________________

19. If no other Symantec application that uses virus definitions is installed, go to the following key:

HKEY_LOCAL_MACHINE\Software\Symantec

Delete the SharedDefs key.
20. If Symantec AntiVirus is the only Symantec program that is installed, delete the following keys:
• Common Client
• SymEvent
21. If Symantec AntiVirus is the only Symantec program that is installed, go to the following key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es

Delete the SymEvent key.
22. If Symantec AntiVirus is the only Symantec program that is installed, go to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Delete the ccApp key.
23. Restart the computer.

Symantec AntiVirus server is now disabled, even though traces of it remain in the registry. These traces have little impact on how your computer operates. It is not necessary to remove them.


Remove Symantec AntiVirus from the Start menu and from the hard drive
After Symantec AntiVirus is disabled, you need to remove leftover files and shortcuts to the program.

To remove Symantec AntiVirus Server from the Start menu
1. On the Windows taskbar, right-click Start, and then click Open All Users.
2. Double-click Programs.
3. Double-click Symantec Client Security.
4. Do one of the following:
• If more than one program is listed in this folder, right-click Symantec AntiVirus, and then click Delete.
• If Symantec AntiVirus is the only program that is listed in this folder, right-click Symantec Client Security, and then click Delete.
5. Exit Windows Explorer.

To remove Symantec AntiVirus Server from the hard drive
1. On the Windows taskbar, click Start > Programs > Accessories > Windows Explorer.
2. Go to the Program Files folder.
3. Right-click Symantec AntiVirus, and then click Delete.
________________________________________
WARNING: Follow the next five steps only if the conditions that are described in the steps are met. These instructions affect files and folders that are used by other Symantec products. If you delete a file or folder that is used by another Symantec product, that product must be removed and installed again.
________________________________________
4. If Symantec AntiVirus is the only Symantec product on your computer, delete the Symantec folder.
5. Go to the following folder:

Program Files\Common Files\Symantec Shared
6. If Symantec AntiVirus is the only Symantec product on your computer, delete the VirusDefs folder.
7. If Symantec AntiVirus is the only Symantec product on your computer, delete the SSC folder.
8. Go to the following folder:

C:\Documents and Settings\All Users\Application Data\Symantec\
9. Delete the following folders:
• Symantec AntiVirus Corporate Edition
• Common Client
10. Exit Windows Explorer.

[JohnWood]

Подскажите, а что надо удалить чтобы при переустановке NAV, спрашивался серийник, а то сейчас на ПК серийник забанен и NAV при переустановке его не спрашивает и ставит с забаненым вновь...обломчикс...

[ispolin]

JohnWood,
Norton Removal Tool или SCSClean

[kilit]

Подскажите, а что надо удалить чтобы при переустановке Nis2012, спрашивался серийник?