Manually Remove Vipre Business Agent

In Knowledge Base Blog by angeladmin

Manually removing the agent should only be used as a last resort when all other options have been exhausted. 

 
Try to remove the agent from the VIPRE Server by right clicking it and selecting uninstall agent. 
On the Agent machine attempt to remove it through add remove program or programs and features depending on your operating system or try running the following command:
  • Go to Start > Run> Type ‘MsiExec.exe /I{9D544611-F437-4153-913E-91CE036583CC}’
IMPORTANT: VIPRE PREMIUM Business Agents have a firewall component that integrates with the network card. Not following these directions properly could result in loss of network connectivity and require the drivers for your NIC to be reinstalled.
 
If you have not already done so, stop the VIPRE Enterprise Agent service and the SB Recovery Service
  1. Go to Start Run
  2. Type ‘ncpa.cpl’ and click Ok
  3. When the window opens,  right click the Active Network Connections select Properties
  4. Highlight the ‘Sunbelt NDIS IM filter’ and click on Uninstall
  5. Repeat this step for all adapters, if you have more than one

Once this is complete continue with the steps below.

Note: Be sure to backup your registry before you make any of the following changes
 
Delete the following registry keys and directories. They vary depending on the Operating System and whether it is 32bit or 64bit. Some paths could also vary if the agent was upgraded from a previous version or clean install of the current agent version.
 
REGISTRY KEYS:
 
X86 keys 
 
HKEY_CLASSES_ROOTInstallerProducts116445D9734F351419E319EC305638CC 
HKEY_LOCAL_MACHINESOFTWARESBAMSvc
HKEY_LOCAL_MACHINESOFTWARESunbelt SoftwareSunbelt Enterprise Agent – 4.0 Agent
HKEY_LOCAL_MACHINESOFTWAREGFI SoftwareGFI Business Agent – 5.0 Agent
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBAMSvc
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBAPIFS
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBEMI
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBHIPS
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBPIMSVC
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBRE
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSbtis
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesSBFWIMCL
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesSBFWIMCLMP
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{9D544611-F437-4153-913E-91CE036583CC}
 
X64 keys 
 
HKEY_CLASSES_ROOTInstallerProducts116445D9734F351419E319EC305638CC
HKEY_LOCAL_MACHINESOFTWAREWow6432NodeSBAMSvc
HKEY_LOCAL_MACHINESOFTWAREWow6432NodeSunbelt SoftwareSunbelt Enterprise Agent – 4.0 Agent
HKEY_LOCAL_MACHINESOFTWAREWow6432NodeGFI SoftwareGFI Business Agent – 5.0 Agent
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBAMSvc
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBAPIFS
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBHIPS
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBEMI
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBPIMSVC
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSBRE
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSbtis
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesSBFWIMCL
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesSBFWIMCLMP
HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionUninstall{9D544611-F437-4153-913E-91CE036583CC}
 
Unregister SBAMScanShellExt.DLL:
 
Sometimes, the file, SBAMScanShellExt.DLL, remains registered with the operating system. To fix this issue, please follow the procedures: 
  • Manually unregister SBAMScanShellExt.DLL in command prompt. Run the syntax respectively.
  • For 32-bit and 64-bit operating systems: RegSvr32 /u SBAMScanShellExt.DLL 
Restart the agent workstation
 
FOLDERS AND FILES:
 
X86 folders
 
20002003XP
 
4.0 Agents
C:Program FilesSunbelt SoftwareSBEAgent 
C:Documents and SettingsAll UsersApplication DataSunbeltAntimalware
C:Documents and SettingsAll UsersApplication DataSunbelt SoftwareAntimalware
 
5.0 Agents
C:Program FilesGFI SoftwareGFIAgent
C:Documents and SettingsAll UsersApplication DataGFI SoftwareAntimalware 
 
2008VistaWindows 7
 
4.0 Agents
C:Program FilesSunbelt SoftwareSBEAgent
C:ProgramDataSunbeltAntimalware
C:ProgramDataSunbelt SoftwareAntimalware 
 
5.0 Agents
C:Program FilesGFI SoftwareGFIAgent
C:ProgramDataGFI SoftwareAntiMalware
 
X64 folders
 
20002003XP
 
4.0 Agents
C:Program Files (x86)Sunbelt SoftwareSBEAgent 
C:Documents and SettingsAll UsersApplication DataSunbeltAntimalware
C:Documents and SettingsAll UsersApplication DataSunbelt SoftwareAntimalware
 
5.0 Agents
C:Program Files (x86)GFI SoftwareGFIAgent
C:Documents and SettingsAll UsersApplication DataGFI SoftwareAntimalware 
 
2008VistaWindows 7
 
4.0 Agents
C:Program Files (x86)Sunbelt SoftwareSBEAgent
C:ProgramDataSunbeltAntimalware
C:ProgramDataSunbelt SoftwareAntimalware 
 
5.0 Agents
C:Program Files (x86)GFI SoftwareGFIAgent
C:ProgramDataGFI SoftwareAntiMalware
 
After you have deleted all the folders the agent has been fully removed from the machine.
 
Note: if you are unable to delete any files or folders something was not properly removed with the steps above.