Solved Need help uninstalling Mcafee

[DavidE]

I'm helping someone remotely and found Mcafee on-access scanner and Mcafee firewall are running.
MS Security Essentials and Windows firewall are also running.

I'm trying to completely disable and remove Mcafee.

Nothing is listed in Programs and Features for Mcafee, so I can't uninstall Mcafee from there.
I can't disable or stop the Mcafee services/processes, or change them from autostart in Services.
I tried Msconfig, Autoruns, Control Panel Services ... (Access denied or options are disabled)

I'm guessing Mcafee came preinstalled on the Toshiba laptop, someone uninstalled it in Programs and Features, and then installed MSE...
It's also possible Mcafee was installed from the ISP (TWC), I don't know...

So, is this the best website/tool to use to try and completely remove Mcafee?
Services and Support for Home and Office
How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR)
Has anyone had problems using this Mcafee removal utility?

I did some testing and found Teamviewer can run in Safe Mode.
If I can get the person to boot in Safe Mode with Networking, is that a better approach to fix this?
Then I might be able to disable Mcafee autostart in services, before using the Mcafee removal utility?
Is it better/safer to run the Mcafee removal utility in Safe Mode?

Guess my biggest concern is this person does not have an external (or other HD) where I can create an OS system backup image before making a change like this...
I don't want to run this removal tool, and find the PC can not re-boot.
I did get the Manufacturer recovery discs created, so that is a fall-back possibility...

 

[HAVOC]

How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR)

That would be the best way to remove it.

 

[DavidE]

Thanks for the reply HAVOC.

That's the utility I found and want to try, but I'd like to make sure I don't run it and this person can not boot their PC.
I don't want to run this on someone else's PC, and then find they say "the PC will not boot up"!

I've never used this utility, or had MSE, MS firewall, and Mcafee (AV+firewall), all running real-time at the same time...
I don't want to shoot myself in the foot, trying to help someone...

 

[derekimo]

I've used the removal tool on a new laptop of my neighbors, it wasn't in safe mode though.

Why do you want to stop the service if you are removing it with the tool?

 

[DavidE]

Hi Derek,

I don't necessarily want to stop the services before using the removal tool.
I just don't know what I should do in this situation, and that is why I'm asking.

If it was my PC, I'd create a backup image and try whatever I wanted ...

 

[derekimo]

I hear ya David, I'll wreck my own stuff quick.

I can't say I've been in your exact situation with this but it sounds like someone did uninstall from the programs and features but didn't run the tool.

Even running the tool they want you to remove it that way first, then run the tool.

If you want to put any faith in this,

How to Uninstall McAfee Security Center: 9 Steps (with Pictures)

The service only needs to be disabled if you aren't using the tool.

 

[DavidE]

I hear ya David, I'll wreck my own stuff quick.

Yea, me too and if only everyone knew backup images are best thing since sliced bread

The service only needs to be disabled if you aren't using the tool.

Thanks! That's the kind of info/help i need...

 

[Jacee]

You need to stop all McAfee processes (using Task Manager) before uninstalling!

 

[derekimo]

You need to stop all McAfee processes (using Task Manager) before uninstalling!

Just out of curiosity, what if that wasn't done?

I didn't do that when I uninstalled McAfee off my neighbors laptop.

Not questioning your expertise, just curious.

 

[DavidE]

Thanks Jacee !

In my situation, I did not install or uninstall Mcafee or MSE - AV, Firewall, etc...
So, I don't know how Mcafee was installed/uninstalled - I'm just gusessing with what I've said before...

I was on an unrelated phone call and this person mentioned they keep getting a popup message that "Google is going away ... why ... what to do ..."
I didn't understand and said Google is not going away ... can I connect to your PC to see the message you are seeing ...

When I connected via Teamviewer, the PC was painfully slow - trying to open any window/program took 1-2 minutes, if the window/program would open at all.

Eventually I managed to get into Task Manager, and that's when I found/realized MSE and Mcafee are running real-time at the same time.

I killed enough processes that I could somewhat navigate and try to see what is going on...

Eventually I did see the message about "Google going away", and tried to work on that concern...
It seems iGoogle is expiring on Nov 1 and this Toshiba laptop came preinstlled with iGoogle as the IE Home Page, so that's all this person knows about using the internet...
So, I tried to find out what is needed from iGoogle, and take care of that concern.

Anyway, I have not found any way I can disable/kill/stop the Mcafee processes from running, and those should be "Uninstalled"...
The PC Owner knows that Mcafee should have been removed (by someone else) ... so me doing whatever it takes to fix this is not a problem - The PC owner will do whatever I say - I just don't know what (best way) to do to fix this without maybe bricking their PC.

 

[derekimo]

I guess you want to wait for Jacee or cottonball or one of the other security experts. Hopefully it doesn't turn out to be a pain.

 

[DavidE]

Thanks Derek
I know I can get too long winded in my posts, so I tried to keep my OP problem description "short and sweet"
I'll take any advice to get the PC issue fixed.
I'm no guru, and certainly not when it comes to PC security...

 

[derekimo]

You're welcome David, they aren't too long at all.

I'm sure others will chime in when they see it.

I'm guessing you haven't tried the safe mode option yet to stop the processes?

 

[DavidE]

I'm guessing you haven't tried the safe mode option yet to stop the processes?

Correct, I don't expect I'll be able to see this PC again before Monday (10-14-2013), at the earliest.

I'm just trying to figure out what I should do before I connect, and try to fix issues that are beyond my limited knowledge and experience.

 

[derekimo]

You got a couple days to work up a game plan then. You'll get some good suggestions over the weekend.

 

[DavidE]

Yea, thanks

As this is my thread, maybe it's ok if I sidetrack it for a problem I often face trying to help people remotely.
I'm mid 60s, and many people I help are 60-90 years old.
I'm a "geek" but folks I help are not "technically inclined".

People I help do not have an external/internal HD where backup images of "C" can be created.
So I'm often stuck, wondering if I should "make this change", before creating a reliable backup, that I can't create.

Is it possible/practical for me to somehow create a backup image of their PC while I am connected remotely (using Teamviewer).

I'm willing to create the backup image on a local HD on my PC if that is possible.
I don't know if it's possible/practical/safe to do this using Teamviewer...
If creating a backup image "in the cloud" is a better solution, I can look into that.

 

[marsmimar]

David, my apologies for jumping in. Did I understand correctly that you'll have physical access to the machine on Monday (10/14)? If so, do you have an external USB hard drive available? Use the native Windows 7 backup/imaging tool to create a backup along with the companion system repair disk (just in case. ) Once the machine is backed up you should feel a lot more comfortable with the McAfee uninstall. I've used the McAfee removal tool before with no adverse affects. But after using it I also went into the registry and did a general search for McAfee. I wound up deleting about another half-dozen references from the registry.

Again, my apologies for jumping in and especially if I misunderstood anything.

 

[DavidE]

Thanks Lee.
Don't apologize - I appreciate any and all help!
I won't have hands on access to the PC, I only have remote access via Teamviewer.
The PC owner does not have an external USB HD, or any HD other than the one in the Laptop with the OS.
And the HD has only 1 partition.
Maybe I'll try and talk this person into buying an external HD before I work on this.
That, or just backup her User data to the cloud somewhere.
That way if there are issues, I can at least do a factory recovery and get the User data back.
Thanks again for the help!
David

 

[whs]

I am sure Jacee has a reason to advise that all McAfee processes should be stopped before applying the MCPR tool. But I have removed McAfee with MPCR from several systems without first stopping those processes and it always worked perfectly.

 

[Jacee]

In some cases, McAfee is hard to get rid of ... that's why I said to stop all it's processes, then run the tool. There may be a program that's running to keep it as the default anti-virus.

Download DDS from one of these links:
DDS.com
DDS.pif

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.