Loading...

Knowledge Center


How to manually remove Common Management Agent 3.6.0
Technical Articles ID:   KB55208
Last Modified:  1/11/2017
Rated:


Environment

McAfee Application and Change Control 6.1.x
McAfee Common Management Agent (CMA) 3.6.0 for McAfee Application and Change Control
McAfee VirusScan Enterprise (VSE)

Summary

Sometimes you might have to manually remove the CMA.

For example:
  • Mismatched files that prevent standard removal methods after a failed upgrade 
  • Issues with the Access Protection features included in VSE
  • File corruption before or during an upgrade
  • Conflicts with third-party software
In VSE, the Access Protection option Prevent McAfee services from being stopped might require extra steps to be done.

This article includes separate solutions based on the most common product configurations or removal scenarios:
  • If VSE is currently installed (standalone or managed by ePolicy Orchestrator), see Solution 1
  • If VSE was installed and then later uninstalled while Prevent McAfee services from being stopped was enabled, see Solution 2
  • If VSE was installed and then uninstalled while Prevent McAfee services from being stopped was disabled or if VSE was never installed, see Solution 3.
  • If the previous solutions do not apply to your situation, or fail to resolve the issue, see Solution 4 to manually remove CMA. 

Solution

Disable the option Prevent McAfee services from being stopped
For stand-alone installations of VSE:
  1. Click, Start, Programs, McAfee, VirusScan Console.
  2. Right-click Access Protection and select Properties.
  3. Deselect Prevent McAfee services from being stopped.
  4. Click Apply.
  5. Close the VirusScan Console.
  6. Proceed to Remove CMA from the command prompt.
If VSE is managed by ePO:
  1. Log on to the ePO 4.x console.
  2. Click Menu, Systems, System Tree.
  3. Select the directory or computer level for the VSE policy to be changed.
  4. Click the Assigned Policies tab and select VirusScan Enterprise from list.
  5. Click Edit Assignment under the Actions column for the Access Protection Policies entry.
  6. Select Break inheritance and assign the policy and settings below and click Edit Policy for the My Default entry.
  7. Click the Access Protection tab, deselect Prevent McAfee services from being stopped and click Save.
  8. Send an Agent Wakeup Call to apply changes or wait for the next enforce policy to take effect.
  9. Close the ePO Console.

Remove CMA from the command prompt
  1. Click Start, Run and type the appropriate command:
     
For a new installation of VSE:

 "c:\Program Files\Network Associates\Common Framework\frminst.exe" /forceuninstall

NOTE: You can use Windows Explorer to determine the correct path to frminst.exe.
 
  1. Restart your computer to remove CMA processes from memory and complete the file deletion.
If this procedure does not fully remove the CMA agent, see Solution 4.

Solution

Use this solution if VSE was installed and then uninstalled while Prevent McAfee services from being stopped was enabled.
 
Reinstall VSE and disable protection of McAfee services
IMPORTANT: This solution requires that you reinstall VSE. If you are unable to reinstall VSE, see Solution 4.
  1. Install VSE.
  2. Disable the option Prevent McAfee services from being stopped:
     
    1. Click, Start, Programs, McAfee, VirusScan Console.
    2. Right-click Access Protection and select Properties.
    3. Deselect Prevent McAfee services from being stopped.
    4. Click Apply.
    5. Close the VirusScan Console.
       
  3. Uninstall VSE.

Remove CMA from the command prompt.
  1. Click Start, Run, type the following command (including quotation marks), and press ENTER:

    "c:\Program Files\McAfee\Common Framework\frminst.exe" /forceuninstall
     
  2. Restart your computer to remove CMA processes from memory and complete the file deletion.
If this procedure does not fully remove the CMA agent, see Solution 4.

Solution

Use this solution if VSE was installed and then uninstalled while Prevent McAfee services from being stopped was disabled or if VSE was never installed.
 
Remove CMA from the command prompt.
  1. Click StartRun, type the following command (including quotation marks), and press ENTER:

    "c:\Program Files\McAfee\Common Framework\frminst.exe" /forceuninstall 
     
  2. Restart your computer to remove CMA processes from memory and complete the file deletion.
If this procedure does not fully remove the CMA agent, see Solution 4.
 

Solution

Full manual removal procedure for CMA 3.6.x for McAfee Application and Change Control

CAUTION: This article contains information about opening or modifying the registry.

  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a REG file that is not confirmed to be a genuine registry import file.

Disable the McAfee Framework Service via the Windows registry

  1. Click Start, Run, type regedit and click OK.
  2. Locate and select the following key:

    [HKLM\SYSTEM\CurrentControlSet\Services\McAfeeFramework]
     
  3. In the right pane, double-click the Start string and change the Value data to 4.
  4. Restart your computer.
End all running CMA processes
 
  1. Click Start, run, type taskmgr and click OK.
  2. Click the Processes tab.
  3. Select each of the processes below and click End Process. When prompted for confirmation, click Yes :
     
    • McTray.exe
    • UpdaterUI.exe
    • naPrdMgr.exe
       
  4. Close the Task Manager.
Edit the registry
  1. Click Start, Run, type regedit and click OK.
  2. Locate and expand the following key:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]
     
  3. Right-click the McAfeeFramework sub-key and select Delete.
  4. Delete any entries for the McAfeeFramework sub-key under each of the following registry keys:
     
    • [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services]
    • [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services]
    • [HKEY_LOCAL_MACHINE\SYSTEM\ControlSetXXX\Services]
       
  5. Locate and select the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\Framework]
     
  6. Make note of the Installed Path and the Data Path values.
  7. In Windows Explorer, delete the folders mentioned in the above registry values.
  8. Locate and expand the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components]
     
  9. Right-click the Framework sub-key and select Delete.
  10. Locate the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McTray]
     
  11. Right-click the McTray key and select Delete.
  12. Restart your computer.
     

Previous Document ID

9611891

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.