Installation NetShield 4.5.0 on Win2 Server

[ramzes]

Event Viewer stats:

Event ID: 7000
Source: Service Control
Description:

The service "Network Associates Mcshield" failed to start
Cause "Network Associates Mcshield" is illegal Win32-Application.

SP2 for Win2 server has been installed. NetShield4.0.3 complett unistelled.

Can someone please point me the right direction.

Thanks,

ramzes

 

[mastermind76]

Hi Ramzes,
I would assume you haven't completely removed NetShield 4.03. There is a tool called MSI ZAP which you might get from McAfee Support. This actually solves many problems, because fragments of previous installations still remain. In addition you should also install the SP1 for NetShield 4.5.

JAN

 

[ramzes]

Hi mastermind76
I haven't ever heard about this tool. I checked the supportsite of mcafee and can't find any information about MSI ZAP. How can i obtain this tool?

Thanks,

ramzes

 

[mastermind76]

The tool is part of the SDK Service from Microsoft. The problem is that NetShield 4.03 doesn't use MSI. So you might just ask for a manual deinstalltion document from McAfee Support. You won't get this from their homepage, so you'll have to call.

 

[ramzes]

Thanks for you Informations
Ramzes.

 

[AVChap]

You can search for the procedure for manual uninstallation of NS 4.03 from the NAI Knowledge Center. You'll need your grant number to access this.

AVChap

 

[ramzes]

hi AVChap

NS 4.03 has been uninstalled alreadey but not manual.

ramzes

 

[ramzes]

hi AVChap

NS 4.03 has been uninstalled already but not manual.

ramzes

 

[FatesWebb]

Here are the manual removals for 4.0.3

Before starting, follow these two substeps:
Run the Windows NT utility RDISK to create an emergency repair disk.
Run the command UNLODCTR MCSHIELD from the Windows NT command line to stop the registry from recording performance counter information for the McShield service.
Open the Windows NT Services Control Panel, then stop the Network Associates Task Manager service, the Network Associates McShield service, and the Network Associates AlertManager service.
Stop the NetShield console if it is running.
Use the NT Task Manager to end the SHSTAT process.
If you use SNMP, stop the SNMP service in Control Panel/Services.
Delete the NetShield installation directory (the directory that contains the NetShield executables).
Delete this device driver file from %SYSTEMROOT%\SYSTEM32\DRIVERS\NAIFSREC.SYS
Delete this file from %SYSTEMROOT%\SYSTEM32\DSSDATA.DLL
If you are using Windows NT 4.0 and if NetShield was set to load at startup, remove the following registry keys:
HKLM\software\microsoft\windows\CurrentVersion\Run\Shstatexe
HKLM\software\microsoft\windows\CurrentVersion\uninstall\NetShield NT
Remove NetShield installation registry keys:
HKLM\software\mcafee\mcalsnmp
HKLM\software\network associates\Netshield NT
HKLM\software\mcafee\virusscan
HKLM\software\mcafee\alertmanager (Do not remove this key if you have other Network Associates products installed that use Alertmanager.)
Remove NetShield device driver and service registry keys:
HKLM\system\CurrentControlSet\Services\Alertmanager
HKLM\system\CurrentControlSet\Services\NaiFilter
HKLM\system\CurrentControlSet\Services\NaiFsrec
HKLM\system\CurrentControlSet\Services\McShield
HKLM\system\CurrentControlSet\Services\McTaskManager
If you are using Windows NT 4.0 and the context-sensitive scanning option was installed, remove the following registry keys:
HKLM\software\classes\comfile\shell\virusscan
HKLM\software\classes\directory\shell\virusscan
HKLM\software\classes\drive\shell\virusscan
HKLM\software\classes\exefile\shell\virusscan
HKLM\software\classes\word.document.6\shell\virusscan
HKLM\software\classes\word.document.8\shell\virusscan
HKLM\software\classes\word.template\shell\virusscan
If you are using Windows NT 4.0 and you want to remove the Scan for Viruses right-click option, remove the following registry keys:
HKCR\comfile\shell\VirusScan
HKCR\Directory\shell\VirusScan
HKCR\Drive\shell\VirusScan
HKCR\exefile\shell\VirusScan
HKCR\Excel.Addin\shell\VirusScan
HKCR\Excel.Chart.5\shell\VirusScan
HKCR\Excel.Macrosheet\shell\VirusScan
HKCR\Excel.Sheet.5\shell\VirusScan
HKCR\Excel.Template\shell\VirusScan
HKCR\Excel.Workspace\shell\VirusScan
HKCR\Excel.XLL\shell\VirusScan
HKCR\exefile\shell\VirusScan
HKCR\WinZip\shell\VirusScan
HKCR\Word.Document.6\shell\VirusScan
HKCR\Word.Template\shell\VirusScan
To remove SNMP extension agent, remove the following registry value:
HKLM\system\CurrentControlSet\services\SNMP\parameters\ExtensionAgent\McAlSNMP
Since entries in HkeyClassesRoot are not derived from a hive, it is unnecessary to delete these keys manually. When you reboot, NetShield-specific keys under HkeyClassesRoot will be removed.
Reboot the system.

Hope that helps js error; 67 on line; 36 of signature.class

 

[ramzes]

i checked the sytemfiles and registry i haven't found anything. Then i asked mcafee for a support and got the manual removals for NS 4.0.3 and a little note:

*w2k change the programmpath ../Network Associates/... so that not space available between .../NetworkAssociates/...

now the installation work fine

ramzes