How to manually remove McAfee Agent 5.x

Technical Articles ID:   KB65863
Last Modified:  1/23/2020


McAfee Agent (MA) – all supported 5.x versions

For details about the MA supported environments, see KB51573.

NOTE: McAfee Agent 4.8 reached End of Life (EOL) for Windows, Mac, and Linux computers on March 31, 2018. See KB88098 for details.


Under certain conditions, you might have to remove the McAfee Agent manually. Possible reasons include:
  • A failed upgrade leaves mismatched files and stops the /Forceuninstall from removing the agent.
  • Issues with the Prevent McAfee services from being stopped option in VirusScan Enterprise (VSE).
  • Corruption of files in previously installed versions of McAfee Agent.
  • Third-party software conflicts.


Before you try to remove McAfee Agent manually, try to remove McAfee Agent using frminst.exe and the /forceuninstall switch:

IMPORTANT. If you incur errors while performing the uninstall using the forceuninstall switch, follow the steps in the "Manual removal steps" section.
  1. Disable McAfee services protection in VSE, if needed.

    VSE includes an Access Protection feature that prevents McAfee services from being stopped. To successfully remove McAfee Agent, you must disable this setting either locally or using ePolicy Orchestrator (ePO). Do either of the following:

    1. On the affected computer, click Start, Programs, McAfee, VirusScan Console.
    2. Right-click Access Protection and select Properties.
    3. Deselect Prevent McAfee services from being stopped.
    4. Click Apply.
    5. Close the VirusScan console.
    6. Continue to step 2.

    1. On the ePO server, open the ePolicy Orchestrator Console.
    2. Select the directory or computer level where you need to change the VSE policy.
    3. In the right pane, expand the VirusScan Enterprise policy.
    4. Click Edit beside Access Protection Policies.
    5. Click the Access Protection tab and deselect Prevent McAfee services from being stopped.
    6. Click Apply.
    7. Send an agent wake-up call to apply the changes, or wait for the next policy enforcement for the changes to take effect.
    8. Close the ePO console and continue to step 2.

  2. Run the frminst.exe /forceuninstall command:
    1. On the affected computer, click Start, Run, and type one of the following commands:

      "c:\Program Files\McAfee\Agent\x86\frminst.exe" /forceuninstall
      "c:\Program Files\McAfee\Common Framework\x86\frminst.exe" /forceuninstall

      IMPORTANT: The path varies depending on the version of McAfee Agent you installed, and whether you installed as an upgrade or clean installation. Use Windows Explorer to determine the correct path.​
    2. To remove McAfee Agent processes from memory and complete the deletion of files, restart the computer.
If this procedure fails, continue to the manual removal steps.


IMPORTANT: Before you continue, make sure that you allow McAfee services to be stopped. This action is described in step 1 of the instructions above on trying to remove McAfee Agent with the use of frminst.exe and the /forceuninstall switch.

CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see:
  • Do not run a REG file that is not confirmed to be a genuine registry import file.

On the affected computer, perform the following procedures in the order that they are listed:

Disable the McAfee Framework Service:
  1. Click Start, Run, type regedit.exe, and then click OK.
  2. Navigate to the following key:

  3. Double-click the Start value and set the Value data to 4.
  4. Restart your computer.

End all running McAfee Agent processes:
  1. To open the Task Manager, press Ctrl+Alt+Delete.
  2. Click the Processes tab.
  3. Individually select each of the following processes and click End Process. Click Yes when prompted.

    NOTE: If any of these processes is not listed in the Task Manager, skip to the next process.


  4. Close the Task Manager.
Delete McAfee Agent services from the registry:
  1. Click Start, Run, type regedit.exe, and click OK.
  2. Navigate to and expand the following key:

  3. Right-click the McAfeeFramework subkey and click Delete.
  4. Navigate to each of the following keys and delete the McAfeeFramework subkey, if it exists:


  5. Navigate to the following key:

    32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\Framework
    64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\TVD\Shared Components\Framework
  6. Make a note of the values for Installed Path and Data Path.
  7. Delete the two folders mentioned in the above registry values.
  8. Navigate to and expand the following key:

    32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components
    64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\TVD\Shared Components
  9. Right-click the Framework subkey and click Delete.
  10. Navigate to the following key:

    64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\McTray
  11. Right-click McTray and click Delete.
  12. Navigate to and expand the following key:

    32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
  13. Right-click the appropriate subkey and click Delete:
    MA Version Build Key
    5.6.0 {4952B7F2-402E-4E99-948C-66BF2C95B769}
    5.5.0 {386A9C46-C31F-42E8-AC39-583A3174945A}
    5.0.6 {80684F9A-6B01-4F3F-A8C7-C4B7BDF072F1}
    5.0.5 {265FA622-A254-49fb-B380-D9EF9ABFD32D}
    5.0.4 {2B4B02CD-CA9E-4024-9B9B-2EA9950EEC11}
    5.0.3 {7BB6907F-96E6-4722-AD9B-60C132AEE765}
    5.0.2 {DEA2D287-B3F7-4828-8332-3CF31ED15ED7}
    5.0.1 {86D55FFD-408E-4F73-8557-157E920A6AC6}
    5.0.0 {8959B1FD-DB2B-438D-93EE-1BAAC7145F69}
    4.8 Update 3 {76473CBB-FE8D-4E3A-9591-CD6EFB621063}
    4.8 Update 2 {EBF3D65F-011E-44D2-8F4F-C74B52682EDD}
    4.8 Update 1 {1FDB8EC6-BAF1-42F9-8E09-4D9AB369F1B5}
    4.8 {11FEE8E5-D9BD-4AC1-8074-5169069DF812}

  14. Navigate to, and expand the following key:​


    Search through the list of alphanumeric codes in the Products key. Reviewing the ProductName String Value on the right, and locate the McAfee Agent key.
  15. Right-click the appropriate McAfee Agent subkey and click Delete.
  16. Close the registry editor and restart your computer.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.