Knowledge Center

How to manually remove McAfee Agent 4.8, 4.6, 4.5, or 4.0
Technical Articles ID:   KB65863
Last Modified:  1/29/2016


McAfee Agent (MA) 4.8
McAfee Agent 4.6, 4.5, 4.0 (End of Life)


Under certain conditions, you might have to remove the McAfee Agent manually. Possible reasons include: 
  • A failed upgrade leaves mismatched files and stops the /Forceuninstall from removing the agent.
  • Issues with the Prevent McAfee services from being stopped option in VirusScan Enterprise (VSE) 8.5i and later.
  • Corruption of files in previously installed versions of McAfee Agent.
  • Third-party software conflicts.


NOTE: Before you try to remove McAfee Agent manually, attempt to remove McAfee Agent using frminst.exe and the /forceuninstall switch.
  1. Disable McAfee services protection in VSE (if necessary).

    VSE 8.5i and later includes an Access Protection feature that prevents McAfee services from being stopped. To successfully remove McAfee Agent, you must disable this setting either locally or using ePolicy Orchestrator (ePO). Do either of the following:

    If VSE is not managed by ePO:

    1. Click Start, Programs, McAfee, VirusScan Console.
    2. Right-click Access Protection and select Properties.
    3. Deselect Prevent McAfee services from being stopped.
    4. Click Apply.
    5. Close the VirusScan console.
    6. Continue to step 2.

    If VSE is managed by ePO:
    1. Click Start, Programs, McAfee, ePolicy Orchestrator Console.
    2. Select the directory or computer level where the VSE policy will be changed.
    3. In the right pane, expand the VirusScan Enterprise policy.
    4. Click Edit beside Access Protection Policies.
    5. Click the Access Protection tab.
    6. Deselect Prevent McAfee services from being stopped.
    7. Click Apply.
    8. Send an agent wake-up call to apply the changes or wait for the next policy enforcement for the changes to take effect.
    9. Close the ePO console.
  1. Run the frminst.exe /forceuninstall command:
  1. Click Start, Run, and type one of the following commands:
    "c:\Program Files\Network Associates\Common Framework\frminst.exe" /forceuninstall 
    "c:\Program Files\McAfee\Common Framework\frminst.exe" /forceuninstall

    NOTE: The path will vary depending on the version and whether you installed McAfee Agent as an upgrade or clean installation. Use Windows Explorer to determine the correct path.
  2. Restart the system to remove McAfee Agent processes from memory and complete the deletion of files.
If this procedure fails, follow the manual removal instructions in the next solution.


Use the following instructions to manually remove McAfee Agent.
IMPORTANT: Before proceeding, ensure that you allow McAfee services to be stopped as described in step 1 of Solution 1.
CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Intel Security strongly recommends backing up your registry and understanding the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a .REG file that is not confirmed to be a genuine registry import file.
  1. Disable the McAfee Framework Service in the registry and restart the system:

    1. Click Start, Run, type regedit.exe, then click OK.
    2. Navigate to and select the following key:

    3. Double-click the Start value, and set the Value data to 4.
    4. Restart your computer.
  1. End all running McAfee Agent processes:

    1. Press CTRL+ALT+DEL to open the Task Manager.
    2. Click the Processes tab.
    3. Individually select each of the following processes and click End Process. Click Yes when prompted.

    4. Close Task Manager.
  1. Delete McAfee Agent services from the registry:

    1. Click Start, Run, type regedit.exe, and click OK.
    2. Navigate to and expand the following key:


    3. Right-click the McAfeeFramework sub-key and select Delete.
    4. Navigate to each of the keys below and delete the McAfeeFramework sub-key if it exists:


    5. Navigate to and select the following key: 

      32-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\Framework]
      64-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\TVD\Shared Components\Framework]

    6. Note the values for Installed Path and Data Path.
    7. Delete the two folders mentioned in the above registry values.
    8. Navigate to and expand the following key:

      32-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components]
      64-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\TVD\Shared Components]
    9. Right-click the Framework sub-key and select Delete.
    10. Navigate to the following key:

      32-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McTray]
      64-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\McTray]

    11. Right-click McTray and select Delete.
    12. Navigate to and expand the following key:

      32-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\] 
      64-bit operating systems: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\] 
    13. Right-click the appropriate sub-key and select Delete:

      Version Build Key
      MA 4.8 Patch 3 {76473CBB-FE8D-4E3A-9591-CD6EFB621063}
      MA 4.8 Patch 2 {EBF3D65F-011E-44D2-8F4F-C74B52682EDD}
      MA 4.8 Patch 1 {1FDB8EC6-BAF1-42F9-8E09-4D9AB369F1B5}
      MA 4.8 {11FEE8E5-D9BD-4AC1-8074-5169069DF812}
      MA 4.6 Patch 3 {4AEFF024-F0D0-4AD6-8231-FF51949E91E0}
      MA 4.6 Patch 2 {1995804A-B1A2-4826-99DD-CEA1352D090B}
      MA 4.6 Patch 1 {DE91C193-2611-4BD3-A9F9-DF589C572565}
      MA 4.6 {5DBE95F6-823A-4547-9921-CEDFADA1D2D8}
      MA 4.5 Patch 3 {397F4DE2-3C5A-415C-9A36-1D8C2B30B92D}
      MA 4.5 Patch 2 {2AAB21C2-4CDA-4189-A0EC-5ED666113F84}
      MA 4.5 HF620018 {B4496BE1-295F-4A17-9856-FEA2C9AA1A47}
      MA 4.5 Patch 1 {5C1FBBAF-14C8-4A23-A4A7-BCF19A979890}
      MA 4.5 HF542703 {362678B4-6ED5-46E9-A6B2-53EF22159151}
      MA 4.5 {B639A4DE-A375-47D3-89C3-DDCF98D992F7}
      MA 4.0 Patch 4 {6953AE07-57D3-41BA-BAB8-8192A3514032}
      MA 4.0 Patch 3 {E008BEB1-AB63-46C1-BD3D-08D3A1F8E26D}
      MA 4.0 HF481806 {FB82DEF7-781F-4F45-9B6D-1B67DF304ADA}
      MA 4.0 Patch 2 {F2969393-2D4D-4977-8166-B1251B08EF12}
      MA 4.0 Patch 1 {36FE3EDA-0C18-48DE-934B-D9862F82A7A8}
      MA 4.0 {A638557B-1F13-40A0-9627-C892FBCA6960}
    14. Navigate to and expand the following key:


    15. Search through the list of alphanumeric codes within the Products key, reviewing the ProductName String Value on the right, and locate the McAfee Agent key.
    16. Right-click the appropriate McAfee Agent sub-key and select Delete.
    17. Close the registry editor.
    18. Restart your computer.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.