Quick Fix : Uninstall Symantec Endpoint Protection (SEPM) 11 Without Uninstall Password

So i have a clients laptop (XP SP3) which is bluescreening on startup with a NAVEX15.sys error.

(This from Nirsoft – Blue Screen View)

The system would boot into safe mode with networking, but not full windows.

I tried all sorts to clear this, System Restore, msconfig – disabling all non MS services and everything not in c:\windows from the startup tab.
I also uninstalled the NAVEX and any Symantec devices from Device Manager, (look for show hidden devices)

This didnt help.

I then searched the registry for navex15.sys and deleted the related keys from the registry.

This allowed me to boot up.

I then uninstalled symantec.. but wait it asked me for a password, and i dont remember that (like i ever knew it!)

Enter this great little tip from of all places, the symantec forums..


Specifically this entry from reza akhlaghy:

“..Hi Richard,

There’s an easy way, when password prompt opens, run task manager and END
task called MSIEXEC that runs under your user account (not system). The password
go away and uninstall continues !!

So far this trick works both for SEP and older versions…”

Bingo. Symantec now uninstalled.

I am using NiNite.com to update all web related apps on this system, and then, unfortunatley, i have to reinstall Symantec. :(

About Robert Pearman
Robert Pearman is a UK based Small Business Server enthusiast. He has been working within the SMB IT Industry for what feels like forever. Robert likes Piña colada and taking walks in the rain, on occasion he also enjoys writing about Small Business Technology like Windows Server Essentials or more recently writing PowerShell Scripts. If you're in trouble, and you can find him, maybe you can ask him a question.

Leave a reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: