Description:

The following document describes uninstalling eTrust Antivirus manually when the program is not listed in Add/Remove programs

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs.

For information about how to back up, restore, and edit the registry, please review the Microsoft Knowledge Base article "( http://support.microsoft.com/kb/256986/EN-US/ Description of the Microsoft Windows Registry".

Solution:

1. Close the programs (eTrust Antivirus Client or Admin Server) if they are opened.
   
   
2. Close the Realtime monitor if it is opened and also exit the Realmon icon from
   System Tray (Right click on the Realtime icon in System Tray and click on exit).
   
   
3. Stop the following services.
   
   
   
   1. eTrust Antivirus Job Server
   2. eTrust Antivirus Realtime Server
   3. eTrust Antivirus RPC Server
   4. eTrust Antivirus Admin Server - On Admin Server only
   
   
4. Launch Windows Task Manager and ensure that the following processes are not running(If it is running, highlight it and click on End process and stop them)
   
   InoRPC.exe
   InoRT.exe
   InoTask.exe
   Inodist.exe
   
   
5. Delete the folder "eTrust Antivirus" located under <Drive>:\ Program Files\CA\
   Note: If you are not able to delete the folder, just rename the folder.
   
   
6. Delete "eTrust Antivirus" from Winnt\Profiles\All Users\Start Menu\Programs
   
   
7. Open the registry using any registry editor,
   
   
   
   1. Take a backup of your registry (Click on Start>Run, type regedit, click on OK, on the menu, click on File>Export>Export Registry Key, Under "ExportRange" select "All", name the File and click on Save.
      
      
   2. drill down to
      HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\
      and delete the key "eTrustAntivirus"
      
      
   3. drill down to
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
      and delete the key "Realtime monitor"
      
      
   4. drill down to
      HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
      and delete the following keys
      
      INO_FLPY
      INO_Fltr
      InoRPC
      InoRT
      InoTask
      InoNmSrv - Admin Server Only
      
      Also run a search for the following keys in the registry and delete them if available
      95C695FB-C00A-45A2-8541-416F55A800B1
      FA5675E8-E17C-47B3-80F2-98916AFE3829
      
      
8. Delete the files "Ino_flpy.sys" and "Ino_fltr.sys" located under
   C:\Windows\System32\Drivers or C:\WinNT\System32\Drivers
   For win9x - Run a search wimmun32.vxd, inocfdd.vxd and delete it.
   
   
9. Reboot the machine

Other Relevant Information:

Note: If eTrust Antivirus Mail Option for Exchange or Lotus Notes is installed on your machine, it should be turned off and uninstalled before uninstalling

eTrust Antivirus Client/Admin Server. Refer to the link below for instructions.

TEC432016 (SupportConnect link, Support Online link )