gfi agent removing procedure
TRANSCRIPT
Windows XP / 2003
1. Boot from Windows CD
2. Choose REPAIR (R) and select the installation to be repaired
3. Type the password for the local Administrator
4. Enter the command: DEL C:\WINDOWS\system32\drivers\esecdrv42.sys
5. Enter the command: exit
6. Start Windows normally
7. Delete the following registry keys:
HKLM\SYSTEM\CurrentControlSet\Services\EsecAgentSvc
HKLM\SYSTEM\CurrentControlSet\Services\esecdrv
HKLM\SYSTEM\CurrentControlSet\Services\esecdrv42
HKLM\SOFTWARE\GFI\EndPointSecurity4
8. Restart the computer
9. Delete the folder C:\Program Files\GFI\EndPointSecurity 4 Agent
10. Depending on the version of the agent, delete the registry keys as specified in Appendix A
11. From the GFI EndPointSecurity Console, remove the agent by selecting the option ?Delete computer(s) without uninstall?
NOTE 1: In step 4, if the agent installed is version 4 or 4.1, the driver is called esecdrv.sys
NOTE 2: In step 12, on x64 operating systems the GFI\EndPointSecurity registry key is located under HKLM\SOFTWARE\Wow6432Node\GFI
Appendix A
GFI EndPointSecurity 4.2 and 4.3
Builds:20100625 20100428 20091109 20091014
Keys:
HKLM\SOFTWARE\Classes\Installer\Products\505AD1BC44D34744B81ED6B0071A1E23 and
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CB1DA505-3D44-4474-8BE1-6D0B70A1E132}
GFI EndPointSecurity 4 and 4.1
Builds:20090508 20090217 20080215
Keys:
HKLM\SOFTWARE\Classes\Installer\Products\09F8D729D7CAB5946B6907B2AD8DDEC7 and
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{927D8F90-AC7D-495B-B696-702BDAD8ED7C}
NOTE: On x64 operating systems, the Uninstall\{<GUID>} registry key is located under HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall