I inherited a clients network running anti virus software from McAfee. This is "Epolicy Orchestrator" (version 3.6) and McAfee Antivirus 8.0. The anti virus client is installed on Server (MS Server 2003) and about a dozen clients (Windows XP). When I understand the concepts of this software the right way the client portion of the virus scanner was distributed by Epolicy Orchestrator. Now it's my task do remove the software from server and clients. After nearly one week of searching for documentations I would like to ask here for a hint where to find this documentation.
I made several efforts to get a "grant" number from the former dealer of the software, but no luck. Also I could not find anything helpful in the internet. So I hope that someone from you can provide me with a link to some useful documents about this task.
Many thanks in advance and best regards,
Thanks for input, OIIIIIO (doesn't seem to be your name :-)
Excuse me please that I did not make clear one point: I'ts impossible to me to use EPO for any install or uninstall task. I tried for days to understand it - no chance. I have no support from the manufacturer because of missing "grant"-number and there is not really (anymore) time to study this system. And even if I would or could put my hands on that: McAfee/AV- and EPO-Software is creating a lot of errors in system protocols of server and clients, so if it does not work no one will know whether you did the mistake with EPO or whether the system is broken.
So the only way seems to be some removal tool (like other manufacturers offer) or a document that says what to delete in file system and registry on server and clients...
Thanks and regards,
i meant the attachment in my first post-
anyway... click on the area on the left that says "Verzeichnis" then on the right pane, click tasks.
you should then see your deployment tasks (if they are set at the directory level).
then refer to my earlier post- and look at the attached pic.
sorry, I did not realize your attachement. It's great having seen the point to start with.
I will try this tomorrow, for today I have no access to the system I'm talking about. Anyway I will need a lot of confidence to use this software for removal purposes. During the past weeks I was not able to handle at least one single task with this software. One day for example it was necessary to stop the servers AV client to install a database - I couldn't. It reactivated itself again and again, sometimes after 1 Minute, sometimes after 15 Minutes. In the middle of setup process. I didn't find any document in the net to overcome that, no chance. And at the end the database was corrupt!
Thanks a lot for your hint, if nothing else is possible I will have to do it this way. But will this really leave the clients file system and registry clean? And what about all that stuff on the server itself (McAfee Virusscan, Groupshield, EPO) with it's numerous folders and files?
unfortunately your screenshot is quite different from mine, I have only two entries in this task windows which I cannot edit. I tried it not only on directory level ("Verzeichnis"), also on the lower levels down to the single machines - these windows look all the same. Another problem is that in the directory tree on the left hand side are listed only a few computers. Many of them which definitely have the McAfee AV-Client installed are not listed.
What could be done to remove this software and protect this network again? There must be some removal tool from McAfee! Any idea, Jane?
Thanks for your patience,
OK... when you expand the directory- are there any "sites" listed below it, as the task may be set at that level.
For manual :you should be able to stop the McAfee framework service and Mcsheild service and uninstall virusscan through the add/remove programs. then ( this is relating to higher version agents because i can't remember what it will be for theolder agents) run c:\Program Files\Network Associates\Common Framework\fminst.exe /remove=agent
I would prompt you to look at the Knowledgebase for manual removal instructions, but its currently down.
thanks a lot. Yes, there is listed a site under directory, but the task settings look the same. One level deeper there are listed the clients, which again have the same task settings (or options). So there isn't any install or uninstall task that I could choose or alter.
I tried the manual way you described on a client, it seems to work. At least one of two services disappeared from services applet, it was the Framework service, if I remember right. The McAfee service stayed, but this could be due to a virus or a totally corrupted client installation.
I found a document: https://kc.mcafee.com/corporate/index?page=content&id=KB52648
Is it that what you mean? I saw this document earlier, but it left too many questions open to me:
- does it describe the client or the server part?
- if it refers to client: what happens afterwards, will the client be installed again automatically by EPO?
- should I first uninstall McAfee, EPO and Groupshield from server via standard add/remove programs option and then the clients manually in the way you proposed?
Hope you're still willing to coment on that!
Thanks a lot and regards,
BenediktNachricht geändert durch Benedikt Seigner on 07.09.10 10:06:38 CDT