Proceed with Caution: Read
and understand all of the materials you can find on the topic, including
these, before following any of the procedures described.
Basic Information:
http://9337387.home.icq.com/main16.html -- Thanks to Carol at http://www.annoyances.org for this one. A readable and useable procedure. A good framework to match other procedures against, and help to place a lot of detail in perspective. My choice for a starting point. The page is from a site, Frank's Windows 95/98 Tips which I am adding to my list of primary resources. Frank's referral to Rick Selby's Microsoft Windows Help Page is a good tip, too. On the basis if his and Carol's recommendtion I have downloaded the jv16 Power Tools suite. If I get a chance to try it out, that will be noted here.
http://www.kalilily.net/weblog/02/11/13/190551.html
http://www.annoyances.org/exec/forum/win95/t1009129064
http://www.mcafeehelp.com/ (For 4.5x, beg, and they will give you a LD telephone number (not toll free) to call for help.)
Summary: This document contains instructions for manually uninstalling version 4 of VirusScan.
Attempt an Automatic Uninstall
1.Click on the Start button.
2.Highlight Settings then click on Control Panel. The
Control Panel will then appear.
3.Double click on the Add/Remove Programs icon. The Add/Remove
Programs Properties dialog box will then appear.
4.Locate McAfee VirusScan on the list of installed programs
and single click on it so it is highlighted.
5.Click the Add/Remove button. NOTE: If at any time you
are prompted to remove shared files, answer Yes To All.
6.Windows will then attempt to remove McAfee VirusScan
from your computer. If the operation is successful you will need to restart
your computer. If McAfee
VirusScan is successfully uninstalled you
do not need to complete the remaining steps in this document. If you receive
error messages or find that McAfee
VirusScan was not completely removed then
follow the steps below to manually remove the program.
Manually Removing McAfee VirusScan
IMPORTANT: Before beginning to remove VirusScan manually from your computer
be sure to backup the Registry. This will safeguard your Windows installation.
You can recover your Windows configuration by restoring the backup
if something goes wrong.
The instructions in this document will guide you through deleting specific
items from your computer. If you are instructed to delete an item that
you cannot find,
skip that step and continue with the next step. Some steps may not
be applicable to your installation of VirusScan.
How to Backup the Registry
1.Click on the Start button.
2.Click on Run.
3.Type in REGEDIT then click OK. The Registry Editor will
then appear.
4.Click on the Registry pull-down menu then click on Export
Registry File. The Export Registry File dialog box will then appear.
5.In the File Name field type 'backup' (without the quotation
marks).
6.In the Save In field be sure that Desktop is selected
(if it is not, click on the pull-down arrow and select 'Desktop.')
7.Select 'All' in the Export Range groupbox.
8.Click on the Save button.
You now have a backup of your Registry saved as 'backup' on your desktop.
NOTE: If you need to restore the Registry you can double-click on the
'backup' file you created and it will be restored. However, after finishing
your editing and
testing to be sure all is running properly, please delete the 'backup'
file so that the old registry is not accidentally restored.
How to Edit the Registry
1.Click the plus sign (+) next to HKEY_LOCAL_MACHINE.
2.Click the plus sign (+) next to System.
3.Click the plus sign (+) next to CurrentControlSet.
4.Click the plus sign (+) next to Services.
5.Click the plus sign (+) next to VxD.
6.Single-click on VSHINIT so it is highlighted, then press
the Delete key on the keyboard to remove this entry.
7.Now going back up the tree structure, click the minus
sign (-) next to VxD.
8.Click the minus sign (-) next to Services.
9.Click the minus sign (-) next to CurrentControlSet.
10.Click the minus sign (-) next to System.
11.Click the plus sign (+) next to Software.
12.Single-click on McAfee so it is highlighted, then press the
Delete key on the keyboard to remove this entry.
13.Click the plus sign (+) next to Microsoft.
14.Scroll down and click the plus sign (+) next to Windows.
15.Click the plus sign (+) next to CurrentVersion.
16.Single-click on Run so it is highlighted.
17.On the right side of the window, highlight and delete the
following entries:
AvconsoleEXE
McAfeeWebScanX
Vshwin32EXE
VsStatEXE
VsecomrEXE
18.On the left side of the window, single-click on RunServices
so it is highlighted.
19.Highlight Vshwin32EXE in the right window and press Delete.
Highlight McAfeeWebScanX in the right window and press Delete.
20.On the left side of the window, click the plus sign
(+) next to Uninstall.
21.Highlight and delete the McAfee VirusScan folder.
22.Now going back up the tree structure, click the minus
sign (-) next to Uninstall.
23.Locate the folder named SharedDLLs. Left-click once
on the name of this folder so it is highlighted. Now look on the right
side of the screen. You will
notice there is a Name column and a Data column.
Locate the following items under the Name column and delete them.
NOTE: In order to view the entire length of
the name column you will need to increase the size of the Registry Editor
window so it fills your whole screen.
You may also need to increase the length of
the Name column by left-clicking the divider line located between the Name
and Data column headings,
holding down the mouse button, and dragging
the divider line to the right.
C:\WINDOWS\SYSTEM\MCAFECOM.DLL
C:\WINDOWS\SYSTEM\MCKRNL.VXD
C:\WINDOWS\SYSTEM\MCSCAN32.VXD
C:\WINDOWS\SYSTEM\MCUTIL.VXD
C:\WINDOWS\SYSTEM\VSHIELD.VXD
C:\WINDOWS\SYSTEM\VSHINIT.VXD
24.If VirusScan 4.0.x is running on a network with a Microsoft
Exchange Server, do the following, otherwise skip to the next step:
Moving back
up the tree structure, on the left side of the screen, locate CurrentVersion
and left click on the minus sign (-) next to it.
Locate Windows
and click on the minus sign (-) next to it.
Click the plus
sign (+) next to Exchange.
Click the plus
sign (+) next to Client.
Single-click
on Extensions so it is highlighted.
On the right
side of the window, highlight and delete Exchange Scan.
25.Close the Registry Editor by clicking on the X in the
top right corner.
How to Edit the AUTOEXEC.BAT File
1.Click on the Start button.
2.Click on Run.
3.Type in SYSEDIT then click OK. The System Configuration
Editor window will appear. The top window will be labeled
C:\AUTOEXEC.BAT
4.Delete the following lines (if they exist) by highlighting
the line and then pushing the Delete key on the keyboard:
C:\PROGRA~1\NETWOR~1\MCAFEE~2\BOOTSCAN.EXE
C:
@IF ERRORLEVEL 1 PAUSE
@ECHO OFF
REM Environment Settings For McAfee VirusScan
SET PATH=%PATH%;C:\PROGRA~1\NETWOR~1\MCAFEE~1
5.Close the System Configuration Editor by clicking the
X in the top right corner of the large window. You will be asked if you
wish to save changes. Answer Yes.
Restart your computer.
How to Delete McAfee VirusScan Files
1.Double click the My Computer icon on the Desktop.
2.Double click the C: drive.
3.Double click the Program Files folder.
4.Double click on the Network Associates folder.
5.Single click on the McAfee VirusScan folder so it is
highlighted.
6.Press the Delete key on your keyboard.
7.A box will appear asking you if you're sure that you
want to delete these files. Click the Yes button.
8.Once the folder is deleted close all open windows until
you are back on your desktop.
How to Delete the McAfee VxD Files
1.Click on the Start button.
2.Highlight Find then click on Files or Folders. The Find
Files dialog box will then appear.
3.In the Named field type in MCAFECOM.DLL then click the
Find Now button.
4.The computer will then search for the file. When the
file is found it will be displayed at the bottom of the dialog box.
5.Once the file is found right-click on the small icon
to the left of the file's name. A pop-up menu will appear.
6.Left-click on Delete to delete the file. Answer Yes
to any prompts about deleting the file.
7.Repeat steps 3 - 6 for the following files: MCKRNL.VXD,
MCSCAN32.VXD, MCUTIL.VXD, VSHIELD.VXD, VSHINIT.VXD.
8.Once all of these files have been deleted close the
Find Files dialog box by clicking the X in the top right corner.
How to Remove McAfee VirusScan Shortcuts
1.Right click on the McAfee VirusScan Central shortcut
on the desktop (if it exists).
2.A pop-up menu will appear. Left-click on Delete to remove
this shortcut.
3.Click on the Start button.
4.Highlight Settings then click on Taskbar & Start
Menu. The Taskbar Properties dialog box will then appear.
5.Click on the Start Menu Programs tab.
6.Click the Remove button. You will then see a list of
several folders and shortcuts.
7.Locate the McAfee VirusScan folder and single click
on it so it is highlighted.
8.Click the Remove button to delete this folder.
9.Click the Close button followed by the OK button.
VirusScan 4.0.x has now been removed from your computer.
Manual Uninstall for 4.5 - Nothing has been found yet, and McAfee online help insisted I call a toll number for assistance.
Removal for 5.x
http://www.mcafeehelp.com/displaydoc.asp?docid=262&CategoryId=60
Hints for 6.x
http://www.mcafeehelp.com/displaydoc.asp?docid=700&CategoryId=270
http://www.mcafeehelp.com/displaydoc.asp?docid=68373&CategoryId=270
VS 7 for W98+
http://www.mcafeehelp.com/displaydoc.asp?docid=68885&CategoryId=61009
Why:
Every installation (at least by well known vendors) include
an uninstall process for their program. This is created and set
into the system registry at the program's installation
which refers to the uninstall command and links the install log (kept
so the uninstall knows what to remove). Sometimes this
log, the uninstall executable or other corrupted/lost files/entries
can cause the uninstall process to fail. When this happens,
you really have no alternative but to manually remove the
program. Just because the program can't uninstall does
not mean that it cannot currently and/or continue to run
properly.
There are instances where McAfee install/uninstall will
fail leaving registry entries and files on the system that can affect
the next install. Example: You launch the MU Packager
for NAV, it detects McAfee, but the uninstall errors out saying it
cannot complete the install. Due to the uninstall not
being able to complete, you will have to manually remove these now
rogue entries.
Two utilities that attempt to do this are listed below,
available from only.missouri.edu or on the MUIAS v2.01 and higher
cd under X:\EXTRAS\PATCHES where 'X' is your CD-ROM drive
letter. Install at your own risk!:
For Windows 95/98: VSremove9x.exe
For Windows NT/2000: VSremoveNT.exe
... you can attempt the VSremove9x.exe on windows ME, but
it may fail. Again only use these utils if the Add/Remove
Programs wizard fails. If the above util fails on your
system, you consider taking your machine to the IAT Services
Outpost to have our service tech (time-based charges may
apply).
Manual Fix
WARNING: Modifying the registry is a serious task and can
easily lead to causing application failure, system problems
and/or damage Windows to the point of needing to be re-installed.
If you do not understand the registry or are not
confident in carrying out such critical functions, STOP
and contact the IAT Services Help Desk or take your system to the
IAT Services Outpost.
IAT Services or the University of Missouri will not support
or answer liability to problems caused by end-users modifying
their registry. Again, only try the following if uninstalling
via Add/Remove Programs fails. Also, before deleting any keys
below, you can make a backup at anytime by highlighting
the key (yellow folder), click REGISTRY | EXPORT
REGISTRY FILE..., select the Selected Branch option at
the bottom of the save screen, type in a distinguished file name
with a .reg extension and click the SAVE button. Also
view articles in the KB for backing up the registry for each OS: NT,
2000, 95, 98
The following lists the steps to remove remnants of McAfee
VirusScan that try to start it and cause interference with other
applications. Try only after you have attempted to remove
it through Add/Remove Programs:
NT users need to be logged
in as Administrator or equivalent user.
Open the registry editor
by clicking START | RUN, typing regedit and clicking OK.
In the registry editor,
expand the hive HKEY_LOCAL_MACHINE.
For Windows 95 or 98 further expand the key Software.
For Windows ME, NT or 2000 further expand the key SOFTWARE.
Expand the following Microsoft\Windows\CurrentVersion
and check both the Run and RunServices keys
for values pointing to .exe
files in the McAfee/VirusScan/Network Associates install directories. If
you find them,
delete them.
If your system is Windows NT or 2000 click START | RUN | CMD and press
Enter. In the DOS window type
net stop mcshield and press ENTER. Whether this fails or not type net stop
avsynmgr. If the system cannot
find one or more of these services, that's OK, but if it is unable to stop
either service, you may need to reboot
and come back to this point.
expand the following key HKLM\SYSTEM\CurrentControlSet\Services\ If you
see the keys McShield or
AvSynMgr.
Close regedit and restart
your system.
... Once restarted, delete the Network Associates program
directory. Defaults to C:\Program Files\Network Associates.
You may have altered this when initially installing VirusScan.
Highlight this directory, press the Delete key and OK past
the confirmation.
Windows NT/2000
If the installation of the new product will not run after uninstalling
the previous version, delete all the
files in the Winnt\Temp, and the \Temp directory (be aware that many people
store "working" files
in here so it is best to check with the user to see if there is anything
required contained here). Try
running the installation once again after the files have been deleted.
If the install still will not
proceed, continue on to the instructions below.
The following instructions involve making modifications to the registry
of the machine. Please make
sure all necessary files that might be stored locally on the hard drive
have been backed up, and that
you have a current emergency repair disk for the machine that you are working
on.
Begin by installing the Microsoft Windows Installer Cleanup Utility for
Windows NT/2000. Save the
file to the local hard disk and install by double clicking on the saved
file. To run the Cleanup Utility,
find the entry that was added to the Programs menu and run the only menu
item that is associated
with it. This program has nothing to do with the cleanup of the Network
Associates product, it is only
cleaning the remnants of the Windows Installer.
See below in the Windows 9x section for registry keys that should be deleted if they still exist. MostWonder what this is? "the Microsoft Windows Installer Cleanup Utility for Windows 9x"
Try http://is-it-true.org/nt/nt2000/atips/atips66.shtml and http://support.microsoft.com/support/kb/articles/Q238/4/13.ASP
If the installation of the new product will not run after uninstalling
the previous version, delete all the
files in Windows\Temp, and the \Temp directories (be aware that many people
store "working" files
in here so it is best to check with the user to see if there is anything
required contained here). Close
all programs, and press CTRL-ALT-DEL, select everything in the list one
by one with the exception of
Explorer and Systray, and select 'End Task.' After all the tasks have been
ended, try running the
installation again. If the install still will not proceed, continue on
to the instructions below.
The following instructions involve making modifications to the registry
of the machine. Please make
sure all necessary files that might be stored locally on the hard drive
have been backed up.
Begin by installing the Microsoft Windows Installer Cleanup Utility for
Windows 9x. Save the file to
the local hard disk and install by double clicking on the saved file. To
run the Cleanup Utility, find the
entry that was added to the Programs menu and run the only menu item that
is associated with it.
This program has nothing to do with the cleanup of the Network Associates
product, it is only
cleaning the remnants of the Windows Installer.
Windows 9x Manual Uninstall
To remove VirusScan without using the uninstall utility, follow these steps:
(Some of the steps may
not apply. Just proceed to the next).
1. Remove references to VirusScan from your AUTOEXEC.BAT and your SYSTEM.INI
files. To do so,
follow these steps:
A. Start the Windows system editor. Click Start in the Windows taskbar,
then choose Run. Type
SYSEDIT in the Run dialog box, then click OK.
A set of text files will open on your screen. Your AUTOEXEC.BAT file should
appear as the first or
topmost window in this set. Locate and delete the text of each line in
the AUTOEXEC.BAT file that
refers to VirusScan. Be sure also to delete @IF ERRORLEVEL 1 PAUSE if it
appears in the file.
B. Click the title bar for the SYSTEM.INI window to bring it to the foreground,
then locate this line:
[boot]SCRNSAVE.EXE=C:\PROGRA~1\NETWOR~1\MCAFEE~1\SCRSCAN.EXE
C. Change the line to read: [boot]SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\WINDOW~1.SCR
D. When you have restored your SYSTEM.INI file to its original state, choose
Save from the SYSEDIT
File menu to save your changes, then choose Exit from the File menu to
quit the SYSEDIT
application.
2. Remove VirusScan icons from the Start menu. To do this, follow these steps:
A. Click Start in the Windows taskbar, point to Settings, then choose Taskbar.
B. Click the Start Menu Programs tab.
C. Click the Remove button.
D. Select the McAfee VirusScan folder in the list that appears in the Remove
Shortcuts/Folders dialog
box, then click Remove.
E. Windows will ask you to confirm your action. Click Yes to continue.
F. Click Close to close the Remove Shortcuts/Folders dialog box, then click
OK to close the Taskbar
Properties dialog box.
3. Edit the Registry. To do this, follow these steps:
A. Start the Windows Registry editor. Click Start in the Windows taskbar,
then choose Run. Type
REGEDIT in the Run dialog box, then click OK.
B. Click + to expand the HKEY_LOCAL_MACHINE folder, click + again to expand
the SOFTWARE
folder, then click one more time to expand the CLASSES folder. Next, delete
these keys or entries:
\.vsc
\.vsh
\CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}
\CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}\InProcServer32
\CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}
\CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}\InProcServer32
\comfile\shell\VirusScan
\Directory\shell\VirusScan
\Drive\shell\VirusScan
\Excel.Addin\shell\VirusScan
\Excel.Chart.5\shell\VirusScan
\Excel.Chart.8\shell\VirusScan
\Excel.Macrosheet\shell\VirusScan
\Excel.Sheet.5\shell\VirusScan
\Excel.Sheet.8\shell\VirusScan
\Excel.Template\shell\VirusScan
\Excel.Workspace\shell\VirusScan
\Excel.XLL\shell\VirusScan
\exefile\shell\VirusScan
\Office.Binder.8\shell\VirusScan
\Office.Binder.98\shell\VirusScan
\rtffile\shell\VirusScan
\VSConfigFile
\VSHConfigFile
\WinZip\shell\VirusScan
\Word.Document.6\shell\VirusScan
\Word.Document.8\shell\VirusScan
\Word.RTF\shell\VirusScan
\Word.RTF.8\shell\VirusScan
\Word.Template\shell\VirusScan
\Word.Template.8\shell\VirusScan
C. Move to the HKEY_LOCAL_MACHINE\SOFTWARE folder, then delete these keys or entries:
1. McAfee \Scan95 \ScreenScan
2. \Microsoft\Windows\CurrentVersion\AppPaths\
\SCAN32.EXE
\SCRSCAN.EXE
\VSHWIN32.EXE
3. \Microsoft\Windows\CurrentVersion\Controls Folder\Display\shellex\PropertySheetHandlers
\ScrScanP
4. \Microsoft\Exchange\Client\Extensions\
\Exchange Scan="4.0;C:\Program Files\Network Associates\McAfee
VirusScan\emalscan.dll;1;11000000000000;1110000;"
\Outlook Setup Extension= "4.0;Outxxx.dll;7;000000000000000;0000000000;OutXXX"
5. \Microsoft\Windows\CurrentVersion\Run\
\AvconsoleExe="C:\Program Files\Network Associates\McAfee VirusScan\avconsole.exe /minimize"
\McAfeeWebScanX="C:\Program Files\Network Associates\McAfee VirusScan\WebScanX.exe"
\Vshwin32EXE="C:\Program Files\Network Associates\McAfee VirusScan\VSHWIN32.EXE"
\VsStatEXE="C:\Program Files\Network Associates\ McAfee VirusScan\VSSTAT.EXE"
6. \Microsoft\Windows\CurrentVersion\RunServices \Vshwin32EXE="C:\Program
Files\Network
Associates\McAfee VirusScan\VSHWIN32.EXE"
7. \Microsoft\Windows\CurrentVersion\Controls Folder\
\Display\shellex\PropertySheetHandlers\ScrScanP\@="{C88249A0-AD7E-11cf-AD53-444553540000}"
8. \Microsoft\Windows\CurrentVersion\SharedDLLs
\C:\WINDOWS\SYSTEM\MCAFECOM.DLL
\C:\WINDOWS\SYSTEM\MCKRNL.VXD
\C:\WINDOWS\SYSTEM\MCSCAN32.VXD
\C:\WINDOWS\SYSTEM\MCUTIL.VXD
\C:\WINDOWS\SYSTEM\VSHIELD.VXD
\C:\WINDOWS\SYSTEM\VSHINIT.VXD
9. \Microsoft\Windows\CurrentVersion\Uninstall
\McAfee VirusScan
D. Move to the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\
folder, then delete
these keys or entries:
\VSHINIT
4. Restart your computer.
5. Delete VirusScan files and directories. To do so, follow these steps:
A. Click Start, point to Programs, then choose Windows Explorer.
B. Locate the folder that contains your copy of VirusScan. If you chose
the default installation
options, you should find VirusScan in this directory path: Program Files\Network
Associates\McAfee
VirusScan
C. Remove the following files from the \Windows\system directory on your hard disk:
MCAFECOM.DLL
MCKRNL.VXD
MCSCAN32.VXD
MCUTIL.VXD
VSHIELD.VXD
VSHINIT.VXD
After following the manual uninstall directions from above, you should
search the registry for any
instances of 'Network Associates' and 'Scan' (for the positive hits for
the Scan search, check the key
to see if it looks like it would be related to VirusScan and not other
system scan functions).
You have now removed VirusScan from your system. Restart your computer
to have your changes
take effect.