Win2008 server can't delete mcafee registry values

A place where you can chat about anything that isn't to do with games!
Post Reply
User avatar
ST Dragon
Banned User
Posts: 2240
Joined: Fri Apr 01, 2005 9:11 am
Location: Lost Deimos Station

Win2008 server can't delete mcafee registry values

Post by ST Dragon »

Hi,
I temporarily installed McAFee Entreprise 8.5i (Vista Ready) on Windows Server 2008 Standard Edition, did a full system scan and then un-installed it using the programs and features un-installer.

However, when I then searched for “mcaffe” in the registry (“regedit” in “run”) I noticed the following 4 values which I can not delete. When I press “del” this message comes up.

Image

Image

Image

Image

Image

I also tried this in safe mode, I restarted the server & even re-installed mcafee, un-installed it and then restarted again.
But these values are still there and I can not delete them.

Any help will be highly appreciated.

Thanks in advance.
Saint Dragon - AMIGA - Jaleco 1989

"In the first battle against the Guardian's weapons, created with Vasteel Technology, humanity suffered a crushing defeat."
Thunder Force V
User avatar
ED-057
Posts: 1560
Joined: Fri Jan 28, 2005 7:21 am
Location: USH

Re: Win2008 server can't delete mcafee registry values

Post by ED-057 »

Yay, I love it when software fails and provides no explanation as to why it failed (actually I don't). Can you delete the whole key? If not I would escalate to booting another OS and using a sector editor to manually tweak the registry, just to show it who is boss.
Mikey
Posts: 166
Joined: Thu May 04, 2006 7:47 pm

Re: Win2008 server can't delete mcafee registry values

Post by Mikey »

Can you right click the registry values and 'export' them?
User avatar
robivy64
Posts: 899
Joined: Wed Jul 25, 2007 11:12 pm
Location: Fort Worth, TX

Re: Win2008 server can't delete mcafee registry values

Post by robivy64 »

Boot a 3rd party disc (such as Winternals), mount the OS partition or RAID array, and use a registry editer to delete the keys.
User avatar
Slump
Posts: 195
Joined: Wed Dec 09, 2009 6:24 am
Location: US

Re: Win2008 server can't delete mcafee registry values

Post by Slump »

robivy64 wrote:Boot a 3rd party disc (such as Winternals), mount the OS partition or RAID array, and use a registry editer to delete the keys.
Yeah, I'd try this. My guess is maybe it can't be deleted while the OS is running for some reason.
Also, obviously check your permissions if you haven't already and make sure there aren't any subkeys that are dependent on the key you're trying to remove. The registry can be a filthy bugger... :x
User avatar
Vexorg
Posts: 3090
Joined: Wed Jan 26, 2005 1:33 am
Location: Greensboro NC

Re: Win2008 server can't delete mcafee registry values

Post by Vexorg »

Also right-click on the registry keys and select "Permissions". Registry keys may be subject to permissions preventing you from deleting them. You might also need to make sure you're running regedit as an administrator to have access to change these.
We want you, save our planet!
Xbox Live: Vexorg | The Sledgehammer - Version 2.0
User avatar
ST Dragon
Banned User
Posts: 2240
Joined: Fri Apr 01, 2005 9:11 am
Location: Lost Deimos Station

Re: Win2008 server can't delete mcafee registry values

Post by ST Dragon »

I login into the server as an Administrator.

ccleaner did nothing.

I checked in registry, in "edit", "permissions", but when I tried to add the administrator or give full control to everyone on that folder, it replied with permission denied! :(

http://img295.imageshack.us/img295/5766/23999264.jpg

I run “regedt32” but it’s the same as regular regedit and the problem persists.

Mcafee did not have a separate removal tool, I un-installed it using the windows removal.
Saint Dragon - AMIGA - Jaleco 1989

"In the first battle against the Guardian's weapons, created with Vasteel Technology, humanity suffered a crushing defeat."
Thunder Force V
User avatar
Slump
Posts: 195
Joined: Wed Dec 09, 2009 6:24 am
Location: US

Re: Win2008 server can't delete mcafee registry values

Post by Slump »

ST Dragon wrote:I login into the server as an Administrator.

ccleaner did nothing.

I checked in registry, in "edit", "permissions", but when I tried to add the administrator or give full control to everyone on that folder, it replied with permission denied! :(

http://img295.imageshack.us/img295/5766/23999264.jpg

I run “regedt32” but it’s the same as regular regedit and the problem persists.

Mcafee did not have a separate removal tool, I un-installed it using the windows removal.
I'm not entirely familiar with server 2008 but perhaps you need to seize ownership of the key before you can change permissions. I found an example of how to do this in Win7, not sure if it's applicable to windows 2008 or not...


First be sure you run RegEdit as Administrator
Right click the key in the left hand pane ... select permissions from the context menu
In the permissions dialog, click the advanced button.
In the advanced security settings dialog switch to the Owner tab
I assume your usercode is a member of the local Administrators group
Click the Replace owner on subcontainers and objects box.
If Administrators is NOT the owner, select it in the change owner to box...press Apply...OK.
You are now back at the Permissions dialog box.
Select Administrators and give them Full control by selecting the Full Control checkbox in the Allow column...press Apply ... Ok
It has been a while since I have had to do this ... so I might be off a little on the steps.
The key is IGNORE any messages that say you don't have enought rights...
You must do each key... one at a time....:)

Sorry if that doesn't even apply but at the moment I don't have a windows box at my disposal to check it out for myself.

Also, as I said, be sure there are no sub keys using the key you are trying to remove. You may have to click the Advanced button, then untick the box "Include inheritable permissions" to access them. You need to delete any sub-keys first working from the inside out. I've had people with issues like that before...
User avatar
robivy64
Posts: 899
Joined: Wed Jul 25, 2007 11:12 pm
Location: Fort Worth, TX

Re: Win2008 server can't delete mcafee registry values

Post by robivy64 »

robivy64 wrote:Boot a 3rd party disc (such as Winternals), mount the OS partition or RAID array, and use a registry editer to delete the keys.
:)
Post Reply