Loading...

Knowledge Center


How to manually remove McAfee Agent 4.x
Technical Articles ID:  KB65863
Last Modified:  01/23/2014
Rated:


Environment

McAfee Agent (MA) 4.8, 4.6, 4.5

 

Problem

Under certain conditions, you might have to remove the McAfee Agent manually. Possible reasons include: 
  • A failed upgrade leaves mismatched files that stops the /Forceuninstall from removing the agent.
  • Issues with the Prevent McAfee services from being stopped option in VirusScan Enterprise (VSE) 8.5i and later.
  • Corruption of files in previously installed versions of McAfee Agent or Common Management Agent.
  • Third-party software conflicts.

Solution 1

NOTE: Before you try to remove MA manually, attempt to remove MA using frminst.exe and the /forceuninstall switch.
  1. Disable McAfee services protection in VSE (if necessary).

    VSE 8.5i and later include an Access Protection feature that prevents McAfee services from being stopped. To successfully remove the McAfee Agent, you must disable this setting either locally or via ePolicy Orchestrator (ePO). Do either of the following:

    If VSE is not managed by ePO:

    1. Click, Start, Programs, McAfee, VirusScan Console.
    2. Right-click Access Protection and select Properties.
    3. Deselect Prevent McAfee services from being stopped.
    4. Click Apply.
    5. Close the VirusScan console.
    6. Continue to step 2.

    If VSE is managed by ePO:
     
    1. Click Start, Programs, McAfee, ePolicy Orchestrator Console.
    2. Select the directory or computer level where the VSE policy will be changed.
    3. In the right pane, expand the VirusScan Enterprise policy.
    4. Click Edit beside Access Protection Policies.
    5. Click the Access Protection tab.
    6. Deselect Prevent McAfee services from being stopped.
    7. Click Apply.
    8. Send an Agent Wakeup Call to apply the changes or wait for the next policy enforcement to take effect.
    9. Close the ePO console.
  1. Run the frminst.exe /forceuninstall command:
  1. Click Start, Run, and type one of the following commands:
     
    "c:\Program Files\Network Associates\Common Framework\frminst.exe" /forceuninstall 
    "c:\Program Files\McAfee\Common Framework\frminst.exe" /forceuninstall

    NOTE: The path will vary depending on the version and whether you installed McAfee Agent as an upgrade or clean install. Use Windows Explorer to determine the correct path.
     
  2. Restart the system to remove McAfee Agent processes from memory and complete the deletion of files.
If this procedure fails, follow the manual removal instructions in the next solution.

Solution 2

To manually remove MA 4.x
IMPORTANT: Before proceeding, ensure that you allow McAfee services to be stopped as described in step 1 of Solution 1.
 
CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, McAfee strongly recommends backing up your registry and understanding the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a .REG file that is not confirmed to be a genuine registry import file.
  1. Disable the McAfee Framework Service in the registry and restart the system:

    1. Click Start, Run, type regedit.exe, then click OK.
    2. Navigate to and select the following key:

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfeeFramework]
       
    3. Double-click the Start value, and set the Value data to 4.
    4. Restart your computer.
  1. End all running McAfee Agent processes:

    1. Press CTRL+ALT+DEL to open the Task Manager.
    2. Click the Processes tab.
    3. Individually select each of the following processes and click End Process. Click Yes when prompted.

      McTray.exe
      UpdaterUI.exe
      naPrdMgr.exe

       
    4. Close Task Manager.
  1. Delete McAfee Agent services from the registry:
  1. Click Start, Run, type regedit.exe, and click OK.
  2. Navigate to and expand the following key:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

  3. Right-click the McAfeeFramework sub-key and select Delete.
  4. Navigate to each of the keys below and delete the McAfeeFramework sub-key if it exists:

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSetXXX\Services]

     
  5. Navigate to and select the following registry key: 

    [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\Framework] 
     
  6. Make note of the values for Installed Path and Data Path.
  7. Delete the two folders mentioned in the above registry values.
  8. Navigate to and expand the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components]

    NOTE: If your Operating System is 64-bit (for example, Windows 2008 R2), navigate and expand the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\TVD\Shared Components]

     
  9. Right-click the Framework sub-key and select Delete.
  10. Navigate to the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McTray]

  11. Right-click McTray, then select Delete.
  12. Navigate to and expand the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\] 

    NOTE: If your Operating System is 64-bit (for example, Windows 2008 R2), navigate to and expand the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\] 
     
  13. Right-click the appropriate sub-key and select Delete:

     Version  Build  Key
    MA 4.8 Patch 2 4.8.0.1500 {EBF3D65F-011E-44D2-8F4F-C74B52682EDD}
    MA 4.8 Patch 1 4.8.0.887 {1FDB8EC6-BAF1-42F9-8E09-4D9AB369F1B5}
    MA 4.8 4.8.0.641 {11FEE8E5-D9BD-4AC1-8074-5169069DF812}
         
    MA 4.6 Patch 3 4.6.0.3122 {4AEFF024-F0D0-4AD6-8231-FF51949E91E0}
    MA 4.6 Patch 2 4.6.0.2935 {1995804A-B1A2-4826-99DD-CEA1352D090B}
    MA 4.6 Patch 1 4.6.0.2292 {DE91C193-2611-4BD3-A9F9-DF589C572565}
    MA 4.6 4.6.0.1694 {5DBE95F6-823A-4547-9921-CEDFADA1D2D8}
         
    MA 4.5 Patch 3 4.5.0.1852 {397F4DE2-3C5A-415C-9A36-1D8C2B30B92D}
    MA 4.5 Patch 2 4.5.0.1810 {2AAB21C2-4CDA-4189-A0EC-5ED666113F84}
    MA 4.5 HF620018 4.5.0.1719 {B4496BE1-295F-4A17-9856-FEA2C9AA1A47}
    MA 4.5 Patch 1 4.5.0.1499 {5C1FBBAF-14C8-4A23-A4A7-BCF19A979890}
    MA 4.5 HF542703 4.5.0.1429 {362678B4-6ED5-46E9-A6B2-53EF22159151}
    MA 4.5 4.5.0.1270 {B639A4DE-A375-47D3-89C3-DDCF98D992F7}

     
  14. Navigate to and expand the following key:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products]

  15. Search through the list of alphanumeric codes within the Products key, reviewing the ProductName String Value on the right, and locate the McAfee Agent key.
  16. Right-click the appropriate McAfee Agent sub-key and select Delete.
  17. Close the registry editor.
  18. Restart your computer.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.
United States - English
© 2003-2013 McAfee, Inc.