Loading...

Knowledge Center


How to manually remove McAfee Agent 5.5.x, 5.0.x, and 4.8
Technical Articles ID:   KB65863
Last Modified:  2/23/2018
Rated:


Environment

McAfee Agent (MA) 5.5.x, 5.0.x, 4.8

NOTE: McAfee Agent 4.8 reaches End of Life (EOL) for Windows, Mac, and Linux computers on March 31, 2018. See KB88098 for details.

Problem

Under certain conditions, you might have to remove the McAfee Agent manually. Possible reasons include:
  • A failed upgrade leaves mismatched files and stops the /Forceuninstall from removing the agent.
  • Issues with the Prevent McAfee services from being stopped option in VirusScan Enterprise (VSE).
  • Corruption of files in previously installed versions of McAfee Agent.
  • Third-party software conflicts.

Solution

Before you try to remove McAfee Agent manually, try to remove McAfee Agent using frminst.exe and the /forceuninstall switch:
  1. Disable McAfee services protection in VSE, if needed.

    VSE includes an Access Protection feature that prevents McAfee services from being stopped. To successfully remove McAfee Agent, you must disable this setting either locally or using ePolicy Orchestrator (ePO). Do either of the following:

     
    1. On the affected computer, click Start, Programs, McAfee, VirusScan Console.
    2. Right-click Access Protection and select Properties.
    3. Deselect Prevent McAfee services from being stopped.
    4. Click Apply.
    5. Close the VirusScan console.
    6. Continue to step 2.

    1. On the ePO server, open the ePolicy Orchestrator Console.
    2. Select the directory or computer level where you need to change the VSE policy.
    3. In the right pane, expand the VirusScan Enterprise policy.
    4. Click Edit beside Access Protection Policies.
    5. Click the Access Protection tab and deselect Prevent McAfee services from being stopped.
    6. Click Apply.
    7. Send an agent wake-up call to apply the changes, or wait for the next policy enforcement for the changes to take effect.
    8. Close the ePO console and continue to step 2.

  2. Run the frminst.exe /forceuninstall command:
    1. On the affected computer, click Start, Run, and type one of the following commands:

      "c:\Program Files\Network Associates\Common Framework\frminst.exe" /forceuninstall
      Or
      "c:\Program Files\McAfee\Common Framework\frminst.exe" /forceuninstall

      IMPORTANT: The path varies, depending on the version of McAfee Agent you installed, and whether you installed as an upgrade or clean installation. Use Windows Explorer to determine the correct path.
    2. Restart the computer to remove McAfee Agent processes from memory and complete the deletion of files.
If this procedure fails, continue to the manual removal steps.

 

IMPORTANT: Before proceeding, ensure that you allow McAfee services to be stopped, as described in step 1 of the instructions on trying to remove McAfee Agent with the use of frminst.exe and the /forceuninstall switch.

CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a REG file that is not confirmed to be a genuine registry import file.

On the affected computer, perform all the following procedures in the order that they are listed:

Disable the McAfee Framework Service:
  1. Click Start, Run, type regedit.exe, then click OK.
  2. Navigate to the following key:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfeeFramework]
     
  3. Double-click the Start value and set the Value data to 4.
  4. Restart your computer.

End all running McAfee Agent processes:
  1. Press CTRL+ALT+DEL to open the Task Manager.
  2. Click the Processes tab.
  3. Individually select each of the following processes and click End Process. Click Yes when prompted.

    NOTE: If one of these processes is not listed in the Task Manager, skip to the next process.

    masvc.exe
    macmnsvc.exe
    macompatsvc.exe
    mctray.exe
    naPrdMgr.exe
    UpdaterUI.exe

     
  4. Close the Task Manager.
     
Delete McAfee Agent services from the registry:
  1. Click Start, Run, type regedit.exe, and click OK.
  2. Navigate to and expand the following key:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]
     
  3. Right-click the McAfeeFramework subkey and click Delete.
  4. Navigate to each of the following keys and delete the McAfeeFramework subkey, if it exists:

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSetXXX\Services]

     
  5. Navigate to the following key:

    32-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\Framework]
    64-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\TVD\Shared Components\Framework]
     
  6. Make a note of the values for Installed Path and Data Path.
  7. Delete the two folders mentioned in the above registry values.
  8. Navigate to and expand the following key:

    32-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components]
    64-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\TVD\Shared Components]
     
  9. Right-click the Framework subkey and click Delete.
  10. Navigate to the following key:

    32-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McTray]
    64-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\McTray]
     
  11. Right-click McTray and click Delete.
  12. Navigate to and expand the following key:

    32-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\]
    64-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\]
     
  13. Right-click the appropriate subkey and click Delete:
    MA Version Build Key
    5.5.0 5.5.0.447 {386A9C46-C31F-42E8-AC39-583A3174945A}
     
    5.0.6 5.0.6.220 {80684F9A-6B01-4F3F-A8C7-C4B7BDF072F1}
    5.0.5 5.0.5.658 {265FA622-A254-49fb-B380-D9EF9ABFD32D}
    5.0.4 5.0.4.283 {2B4B02CD-CA9E-4024-9B9B-2EA9950EEC11}
    5.0.3 5.0.3.272 {7BB6907F-96E6-4722-AD9B-60C132AEE765}
    5.0.2 5.0.2.132 {DEA2D287-B3F7-4828-8332-3CF31ED15ED7}
    5.0.1 5.0.1.516 {86D55FFD-408E-4F73-8557-157E920A6AC6}
    5.0.0 5.0.0.2620 {8959B1FD-DB2B-438D-93EE-1BAAC7145F69}
     
    4.8 Patch 3 4.8.0.1938 {76473CBB-FE8D-4E3A-9591-CD6EFB621063}
    4.8 Patch 2 4.8.0.1500 {EBF3D65F-011E-44D2-8F4F-C74B52682EDD}
    4.8 Patch 1 4.8.0.887 {1FDB8EC6-BAF1-42F9-8E09-4D9AB369F1B5}
    4.8 4.8.0.641 {11FEE8E5-D9BD-4AC1-8074-5169069DF812}
  14. Navigate to, and expand, the following key:​

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products]

    Search through the list of alphanumeric codes in the Products key, reviewing the ProductName String Value on the right, and locate the McAfee Agent key.
     
  15. Right-click the appropriate McAfee Agent subkey and click Delete.
  16. Close the registry editor and restart your computer.

Disclaimer

The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.