Uninstalling McAfee VirusScan:  After failure of Uninstall
(Focuses on W98, touches on other MS OS installs of VS)

Proceed with Caution:  Read and understand all of the materials you can find on the topic, including these, before following any of the procedures described.
 
 

Basic Information:

http://9337387.home.icq.com/main16.html  -- Thanks to Carol at http://www.annoyances.org for this one.   A readable and useable procedure.   A good framework to match other procedures against, and help to place a lot of detail in perspective.  My choice for a starting point.  The page is from a site, Frank's Windows 95/98 Tips which I am adding to my list of primary resources.   Frank's referral to Rick  Selby's Microsoft Windows Help Page is a good tip, too.   On the basis if his and Carol's recommendtion I have downloaded the jv16 Power Tools suite.  If I get a chance to try it out, that will be noted here.

 http://www.kalilily.net/weblog/02/11/13/190551.html

 http://www.annoyances.org/exec/forum/win95/t1009129064

http://www.mcafeehelp.com/  (For 4.5x, beg, and they will give you a LD telephone number (not toll free) to call for help.)



http://www-tus.csx.cam.ac.uk/virus/knownissues.html > A good site!
Occasionally problems may occur when running Win 95/98/ME operating systems with McAfee VirusScan 4.5.1 (with and
without SP1). These problems include:
     Blue screens (BSOD).
     Excessive machine slowdown.
     System clock time loss.
     Jerky mouse cursor movement.
     "Stuttering" sound cards.
These problems have been resolved by the "4160 Engine Hotfix 1" released by McAfee.
 http://www.nai.com/naicommon/download/enginehotfix.asp



Complete Manual Removal of VirusScan 4.0.x
http://www.mcafeehelp.com/faq3.asp?docid=597

Summary: This document contains instructions for manually uninstalling version 4 of VirusScan.

Attempt an Automatic Uninstall

   1.Click on the Start button.
   2.Highlight Settings then click on Control Panel. The Control Panel will then appear.
   3.Double click on the Add/Remove Programs icon. The Add/Remove Programs Properties dialog box will then appear.
   4.Locate McAfee VirusScan on the list of installed programs and single click on it so it is highlighted.
   5.Click the Add/Remove button. NOTE: If at any time you are prompted to remove shared files, answer Yes To All.
    6.Windows will then attempt to remove McAfee VirusScan from your computer. If the operation is successful you will need to restart your computer. If McAfee
     VirusScan is successfully uninstalled you do not need to complete the remaining steps in this document. If you receive error messages or find that McAfee
     VirusScan was not completely removed then follow the steps below to manually remove the program.

Manually Removing McAfee VirusScan

IMPORTANT: Before beginning to remove VirusScan manually from your computer be sure to backup the Registry. This will safeguard your Windows installation.
You can recover your Windows configuration by restoring the backup if something goes wrong.

The instructions in this document will guide you through deleting specific items from your computer. If you are instructed to delete an item that you cannot find,
skip that step and continue with the next step. Some steps may not be applicable to your installation of VirusScan.

How to Backup the Registry

   1.Click on the Start button.
   2.Click on Run.
   3.Type in REGEDIT then click OK. The Registry Editor will then appear.
   4.Click on the Registry pull-down menu then click on Export Registry File. The Export Registry File dialog box will then appear.
   5.In the File Name field type 'backup' (without the quotation marks).
   6.In the Save In field be sure that Desktop is selected (if it is not, click on the pull-down arrow and select 'Desktop.')
   7.Select 'All' in the Export Range groupbox.
   8.Click on the Save button.

You now have a backup of your Registry saved as 'backup' on your desktop.

NOTE: If you need to restore the Registry you can double-click on the 'backup' file you created and it will be restored. However, after finishing your editing and
testing to be sure all is running properly, please delete the 'backup' file so that the old registry is not accidentally restored.

How to Edit the Registry

   1.Click the plus sign (+) next to HKEY_LOCAL_MACHINE.
   2.Click the plus sign (+) next to System.
   3.Click the plus sign (+) next to CurrentControlSet.
   4.Click the plus sign (+) next to Services.
   5.Click the plus sign (+) next to VxD.
   6.Single-click on VSHINIT so it is highlighted, then press the Delete key on the keyboard to remove this entry.
   7.Now going back up the tree structure, click the minus sign (-) next to VxD.
   8.Click the minus sign (-) next to Services.
   9.Click the minus sign (-) next to CurrentControlSet.
  10.Click the minus sign (-) next to System.
  11.Click the plus sign (+) next to Software.
  12.Single-click on McAfee so it is highlighted, then press the Delete key on the keyboard to remove this entry.
  13.Click the plus sign (+) next to Microsoft.
  14.Scroll down and click the plus sign (+) next to Windows.
  15.Click the plus sign (+) next to CurrentVersion.
  16.Single-click on Run so it is highlighted.
  17.On the right side of the window, highlight and delete the following entries:
     AvconsoleEXE
     McAfeeWebScanX
     Vshwin32EXE
     VsStatEXE
     VsecomrEXE
  18.On the left side of the window, single-click on RunServices so it is highlighted.
  19.Highlight Vshwin32EXE in the right window and press Delete. Highlight McAfeeWebScanX in the right window and press Delete.
   20.On the left side of the window, click the plus sign (+) next to Uninstall.
   21.Highlight and delete the McAfee VirusScan folder.
   22.Now going back up the tree structure, click the minus sign (-) next to Uninstall.
   23.Locate the folder named SharedDLLs. Left-click once on the name of this folder so it is highlighted. Now look on the right side of the screen. You will
     notice there is a Name column and a Data column. Locate the following items under the Name column and delete them.

     NOTE: In order to view the entire length of the name column you will need to increase the size of the Registry Editor window so it fills your whole screen.
     You may also need to increase the length of the Name column by left-clicking the divider line located between the Name and Data column headings,
     holding down the mouse button, and dragging the divider line to the right.

          C:\WINDOWS\SYSTEM\MCAFECOM.DLL
          C:\WINDOWS\SYSTEM\MCKRNL.VXD
          C:\WINDOWS\SYSTEM\MCSCAN32.VXD
          C:\WINDOWS\SYSTEM\MCUTIL.VXD
          C:\WINDOWS\SYSTEM\VSHIELD.VXD
          C:\WINDOWS\SYSTEM\VSHINIT.VXD
   24.If VirusScan 4.0.x is running on a network with a Microsoft Exchange Server, do the following, otherwise skip to the next step:
          Moving back up the tree structure, on the left side of the screen, locate CurrentVersion and left click on the minus sign (-) next to it.
          Locate Windows and click on the minus sign (-) next to it.
          Click the plus sign (+) next to Exchange.
          Click the plus sign (+) next to Client.
          Single-click on Extensions so it is highlighted.
          On the right side of the window, highlight and delete Exchange Scan.
   25.Close the Registry Editor by clicking on the X in the top right corner.

How to Edit the AUTOEXEC.BAT File

   1.Click on the Start button.
   2.Click on Run.
   3.Type in SYSEDIT then click OK. The System Configuration Editor window will appear. The top window will be labeled
     C:\AUTOEXEC.BAT
   4.Delete the following lines (if they exist) by highlighting the line and then pushing the Delete key on the keyboard:
     C:\PROGRA~1\NETWOR~1\MCAFEE~2\BOOTSCAN.EXE C:
     @IF ERRORLEVEL 1 PAUSE
     @ECHO OFF
     REM Environment Settings For McAfee VirusScan
     SET PATH=%PATH%;C:\PROGRA~1\NETWOR~1\MCAFEE~1
   5.Close the System Configuration Editor by clicking the X in the top right corner of the large window. You will be asked if you
     wish to save changes. Answer Yes.

Restart your computer.

How to Delete McAfee VirusScan Files

   1.Double click the My Computer icon on the Desktop.
   2.Double click the C: drive.
   3.Double click the Program Files folder.
   4.Double click on the Network Associates folder.
   5.Single click on the McAfee VirusScan folder so it is highlighted.
   6.Press the Delete key on your keyboard.
   7.A box will appear asking you if you're sure that you want to delete these files. Click the Yes button.
   8.Once the folder is deleted close all open windows until you are back on your desktop.

How to Delete the McAfee VxD Files

   1.Click on the Start button.
   2.Highlight Find then click on Files or Folders. The Find Files dialog box will then appear.
   3.In the Named field type in MCAFECOM.DLL then click the Find Now button.
   4.The computer will then search for the file. When the file is found it will be displayed at the bottom of the dialog box.
   5.Once the file is found right-click on the small icon to the left of the file's name. A pop-up menu will appear.
   6.Left-click on Delete to delete the file. Answer Yes to any prompts about deleting the file.
   7.Repeat steps 3 - 6 for the following files: MCKRNL.VXD, MCSCAN32.VXD, MCUTIL.VXD, VSHIELD.VXD, VSHINIT.VXD.
   8.Once all of these files have been deleted close the Find Files dialog box by clicking the X in the top right corner.

How to Remove McAfee VirusScan Shortcuts

   1.Right click on the McAfee VirusScan Central shortcut on the desktop (if it exists).
   2.A pop-up menu will appear. Left-click on Delete to remove this shortcut.
   3.Click on the Start button.
   4.Highlight Settings then click on Taskbar & Start Menu. The Taskbar Properties dialog box will then appear.
   5.Click on the Start Menu Programs tab.
   6.Click the Remove button. You will then see a list of several folders and shortcuts.
   7.Locate the McAfee VirusScan folder and single click on it so it is highlighted.
   8.Click the Remove button to delete this folder.
   9.Click the Close button followed by the OK button.

VirusScan 4.0.x has now been removed from your computer.


Manual Uninstall for 4.5 - Nothing has been found yet, and McAfee online help insisted I call a toll number for assistance.

Removal for 5.x
 http://www.mcafeehelp.com/displaydoc.asp?docid=262&CategoryId=60

Hints for 6.x
 http://www.mcafeehelp.com/displaydoc.asp?docid=700&CategoryId=270
 http://www.mcafeehelp.com/displaydoc.asp?docid=68373&CategoryId=270

VS 7 for W98+
 http://www.mcafeehelp.com/displaydoc.asp?docid=68885&CategoryId=61009



A short version, from MU.edu (compare and contrast with those above)
Open the Add/Remove Programs (Click START | SETTINGS | CONTROL PANEL | ADD/REMOVE PROGRAM).
   Once open, scroll down the list of installed applications till you find the listed program and uninstall it; in this case McAfee
   VirusScan. Highlight it and click the Remove button. The uninstall wizard will start up and follow directions.

   Why:
   Every installation (at least by well known vendors) include an uninstall process for their program. This is created and set
   into the system registry at the program's installation which refers to the uninstall command and links the install log (kept
   so the uninstall knows what to remove). Sometimes this log, the uninstall executable or other corrupted/lost files/entries
   can cause the uninstall process to fail. When this happens, you really have no alternative but to manually remove the
   program. Just because the program can't uninstall does not mean that it cannot currently and/or continue to run
   properly.

   There are instances where McAfee install/uninstall will fail leaving registry entries and files on the system that can affect
   the next install. Example: You launch the MU Packager for NAV, it detects McAfee, but the uninstall errors out saying it
   cannot complete the install. Due to the uninstall not being able to complete, you will have to manually remove these now
   rogue entries.

   Two utilities that attempt to do this are listed below, available from only.missouri.edu or on the MUIAS v2.01 and higher
   cd under X:\EXTRAS\PATCHES where 'X' is your CD-ROM drive letter. Install at your own risk!:

        For Windows 95/98: VSremove9x.exe
        For Windows NT/2000: VSremoveNT.exe

   ... you can attempt the VSremove9x.exe on windows ME, but it may fail. Again only use these utils if the Add/Remove
   Programs wizard fails. If the above util fails on your system, you consider taking your machine to the IAT Services
   Outpost to have our service tech (time-based charges may apply).
 

   Manual Fix

   WARNING: Modifying the registry is a serious task and can easily lead to causing application failure, system problems
   and/or damage Windows to the point of needing to be re-installed. If you do not understand the registry or are not
   confident in carrying out such critical functions, STOP and contact the IAT Services Help Desk or take your system to the
   IAT Services Outpost.

   IAT Services or the University of Missouri will not support or answer liability to problems caused by end-users modifying
   their registry. Again, only try the following if uninstalling via Add/Remove Programs fails. Also, before deleting any keys
   below, you can make a backup at anytime by highlighting the key (yellow folder), click REGISTRY | EXPORT
   REGISTRY FILE..., select the Selected Branch option at the bottom of the save screen, type in a distinguished file name
   with a .reg extension and click the SAVE button. Also view articles in the KB for backing up the registry for each OS: NT,
   2000, 95, 98
 

   The following lists the steps to remove remnants of McAfee VirusScan that try to start it and cause interference with other
   applications. Try only after you have attempted to remove it through Add/Remove Programs:

        NT users need to be logged in as Administrator or equivalent user.
        Open the registry editor by clicking START | RUN, typing regedit and clicking OK.
        In the registry editor, expand the hive HKEY_LOCAL_MACHINE.
             For Windows 95 or 98 further expand the key Software.
             For Windows ME, NT or 2000 further expand the key SOFTWARE.
        Expand the following Microsoft\Windows\CurrentVersion and check both the Run and RunServices keys
        for values pointing to .exe files in the McAfee/VirusScan/Network Associates install directories. If you find them,
        delete them.
             If your system is Windows NT or 2000 click START | RUN | CMD and press Enter. In the DOS window type
             net stop mcshield and press ENTER. Whether this fails or not type net stop avsynmgr. If the system cannot
             find one or more of these services, that's OK, but if it is unable to stop either service, you may need to reboot
             and come back to this point.
             expand the following key HKLM\SYSTEM\CurrentControlSet\Services\ If you see the keys McShield or
             AvSynMgr.
        Close regedit and restart your system.
 

   ... Once restarted, delete the Network Associates program directory. Defaults to C:\Program Files\Network Associates.
   You may have altered this when initially installing VirusScan. Highlight this directory, press the Delete key and OK past
   the confirmation.
 



More information!
http://www.tek-tips.com/gfaqs.cfm/pid/38/fid/1993

Windows NT/2000

                         If the installation of the new product will not run after uninstalling the previous version, delete all the
                         files in the Winnt\Temp, and the \Temp directory (be aware that many people store "working" files
                         in here so it is best to check with the user to see if there is anything required contained here). Try
                         running the installation once again after the files have been deleted. If the install still will not
                         proceed, continue on to the instructions below.

                         The following instructions involve making modifications to the registry of the machine. Please make
                         sure all necessary files that might be stored locally on the hard drive have been backed up, and that
                         you have a current emergency repair disk for the machine that you are working on.

                         Begin by installing the Microsoft Windows Installer Cleanup Utility for Windows NT/2000. Save the
                         file to the local hard disk and install by double clicking on the saved file. To run the Cleanup Utility,
                         find the entry that was added to the Programs menu and run the only menu item that is associated
                         with it. This program has nothing to do with the cleanup of the Network Associates product, it is only
                         cleaning the remnants of the Windows Installer.

ed. note: Wonder what this is?   "the Microsoft Windows Installer Cleanup Utility for Windows 9x"
Try http://is-it-true.org/nt/nt2000/atips/atips66.shtml and  http://support.microsoft.com/support/kb/articles/Q238/4/13.ASP
                         See below in the Windows 9x section for registry keys that should be deleted if they still exist. Most
                         of the keys found below will pertain only to Windows 9x machines but similar occurences can be
                         found under NT machines and should be removed.
 
Windows 9x

                         If the installation of the new product will not run after uninstalling the previous version, delete all the
                         files in Windows\Temp, and the \Temp directories (be aware that many people store "working" files
                         in here so it is best to check with the user to see if there is anything required contained here). Close
                         all programs, and press CTRL-ALT-DEL, select everything in the list one by one with the exception of
                         Explorer and Systray, and select 'End Task.' After all the tasks have been ended, try running the
                         installation again. If the install still will not proceed, continue on to the instructions below.

                         The following instructions involve making modifications to the registry of the machine. Please make
                         sure all necessary files that might be stored locally on the hard drive have been backed up.

                         Begin by installing the Microsoft Windows Installer Cleanup Utility for Windows 9x. Save the file to
                         the local hard disk and install by double clicking on the saved file. To run the Cleanup Utility, find the
                         entry that was added to the Programs menu and run the only menu item that is associated with it.
                         This program has nothing to do with the cleanup of the Network Associates product, it is only
                         cleaning the remnants of the Windows Installer.

                         Windows 9x Manual Uninstall
                         To remove VirusScan without using the uninstall utility, follow these steps: (Some of the steps may
                         not apply. Just proceed to the next).

                         1. Remove references to VirusScan from your AUTOEXEC.BAT and your SYSTEM.INI files. To do so,
                         follow these steps:

                         A. Start the Windows system editor. Click Start in the Windows taskbar, then choose Run. Type
                         SYSEDIT in the Run dialog box, then click OK.

                         A set of text files will open on your screen. Your AUTOEXEC.BAT file should appear as the first or
                         topmost window in this set. Locate and delete the text of each line in the AUTOEXEC.BAT file that
                         refers to VirusScan. Be sure also to delete @IF ERRORLEVEL 1 PAUSE if it appears in the file.

                         B. Click the title bar for the SYSTEM.INI window to bring it to the foreground, then locate this line:
                         [boot]SCRNSAVE.EXE=C:\PROGRA~1\NETWOR~1\MCAFEE~1\SCRSCAN.EXE

                         C. Change the line to read: [boot]SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\WINDOW~1.SCR

                         D. When you have restored your SYSTEM.INI file to its original state, choose Save from the SYSEDIT
                         File menu to save your changes, then choose Exit from the File menu to quit the SYSEDIT
                         application.

                         2. Remove VirusScan icons from the Start menu. To do this, follow these steps:

                         A. Click Start in the Windows taskbar, point to Settings, then choose Taskbar.

                         B. Click the Start Menu Programs tab.

                         C. Click the Remove button.

                         D. Select the McAfee VirusScan folder in the list that appears in the Remove Shortcuts/Folders dialog
                         box, then click Remove.

                         E. Windows will ask you to confirm your action. Click Yes to continue.

                         F. Click Close to close the Remove Shortcuts/Folders dialog box, then click OK to close the Taskbar
                         Properties dialog box.

                         3. Edit the Registry. To do this, follow these steps:

                         A. Start the Windows Registry editor. Click Start in the Windows taskbar, then choose Run. Type
                         REGEDIT in the Run dialog box, then click OK.

                         B. Click + to expand the HKEY_LOCAL_MACHINE folder, click + again to expand the SOFTWARE
                         folder, then click one more time to expand the CLASSES folder. Next, delete these keys or entries:

                         \.vsc

                         \.vsh

                         \CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}

                         \CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}\InProcServer32

                         \CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}

                         \CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}\InProcServer32

                         \comfile\shell\VirusScan

                         \Directory\shell\VirusScan

                         \Drive\shell\VirusScan

                         \Excel.Addin\shell\VirusScan

                         \Excel.Chart.5\shell\VirusScan

                         \Excel.Chart.8\shell\VirusScan

                         \Excel.Macrosheet\shell\VirusScan

                         \Excel.Sheet.5\shell\VirusScan

                         \Excel.Sheet.8\shell\VirusScan

                         \Excel.Template\shell\VirusScan

                         \Excel.Workspace\shell\VirusScan

                         \Excel.XLL\shell\VirusScan

                         \exefile\shell\VirusScan

                         \Office.Binder.8\shell\VirusScan

                         \Office.Binder.98\shell\VirusScan

                         \rtffile\shell\VirusScan

                         \VSConfigFile

                         \VSHConfigFile

                         \WinZip\shell\VirusScan

                         \Word.Document.6\shell\VirusScan

                         \Word.Document.8\shell\VirusScan

                         \Word.RTF\shell\VirusScan

                         \Word.RTF.8\shell\VirusScan

                         \Word.Template\shell\VirusScan

                         \Word.Template.8\shell\VirusScan

                         C. Move to the HKEY_LOCAL_MACHINE\SOFTWARE folder, then delete these keys or entries:

                         1. McAfee \Scan95 \ScreenScan

                         2. \Microsoft\Windows\CurrentVersion\AppPaths\

                         \SCAN32.EXE

                         \SCRSCAN.EXE

                         \VSHWIN32.EXE

                         3. \Microsoft\Windows\CurrentVersion\Controls Folder\Display\shellex\PropertySheetHandlers
                         \ScrScanP

                         4. \Microsoft\Exchange\Client\Extensions\

                         \Exchange Scan="4.0;C:\Program Files\Network Associates\McAfee
                         VirusScan\emalscan.dll;1;11000000000000;1110000;"

                         \Outlook Setup Extension= "4.0;Outxxx.dll;7;000000000000000;0000000000;OutXXX"

                         5. \Microsoft\Windows\CurrentVersion\Run\

                         \AvconsoleExe="C:\Program Files\Network Associates\McAfee VirusScan\avconsole.exe /minimize"

                         \McAfeeWebScanX="C:\Program Files\Network Associates\McAfee VirusScan\WebScanX.exe"

                         \Vshwin32EXE="C:\Program Files\Network Associates\McAfee VirusScan\VSHWIN32.EXE"

                         \VsStatEXE="C:\Program Files\Network Associates\ McAfee VirusScan\VSSTAT.EXE"

                         6. \Microsoft\Windows\CurrentVersion\RunServices \Vshwin32EXE="C:\Program Files\Network
                         Associates\McAfee VirusScan\VSHWIN32.EXE"

                         7. \Microsoft\Windows\CurrentVersion\Controls Folder\
                         \Display\shellex\PropertySheetHandlers\ScrScanP\@="{C88249A0-AD7E-11cf-AD53-444553540000}"
 

                         8. \Microsoft\Windows\CurrentVersion\SharedDLLs

                         \C:\WINDOWS\SYSTEM\MCAFECOM.DLL

                         \C:\WINDOWS\SYSTEM\MCKRNL.VXD

                         \C:\WINDOWS\SYSTEM\MCSCAN32.VXD

                         \C:\WINDOWS\SYSTEM\MCUTIL.VXD

                         \C:\WINDOWS\SYSTEM\VSHIELD.VXD

                         \C:\WINDOWS\SYSTEM\VSHINIT.VXD

                         9. \Microsoft\Windows\CurrentVersion\Uninstall

                         \McAfee VirusScan

                         D. Move to the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\ folder, then delete
                         these keys or entries:

                         \VSHINIT

                         4. Restart your computer.

                         5. Delete VirusScan files and directories. To do so, follow these steps:

                         A. Click Start, point to Programs, then choose Windows Explorer.

                         B. Locate the folder that contains your copy of VirusScan. If you chose the default installation
                         options, you should find VirusScan in this directory path: Program Files\Network Associates\McAfee
                         VirusScan

                         C. Remove the following files from the \Windows\system directory on your hard disk:

                         MCAFECOM.DLL

                         MCKRNL.VXD

                         MCSCAN32.VXD

                         MCUTIL.VXD

                         VSHIELD.VXD

                         VSHINIT.VXD

                         After following the manual uninstall directions from above, you should search the registry for any
                         instances of 'Network Associates' and 'Scan' (for the positive hits for the Scan search, check the key
                         to see if it looks like it would be related to VirusScan and not other system scan functions).

                         You have now removed VirusScan from your system. Restart your computer to have your changes
                         take effect.
 
 


Originated January 11, 2003
Moved, August 2004