{"id":359,"date":"2020-11-03T21:30:57","date_gmt":"2020-11-03T20:30:57","guid":{"rendered":"https:\/\/christianlehrer.com\/?p=359"},"modified":"2020-11-06T07:07:01","modified_gmt":"2020-11-06T06:07:01","slug":"uninstall-mcafee-livesafe-silently-from-the-commandline-whatilearnedtoday","status":"publish","type":"post","link":"https:\/\/christianlehrer.com\/?p=359","title":{"rendered":"Uninstall McAfee LiveSafe silently from the commandline #WhatILearnedToday"},"content":{"rendered":"
<\/div>

03.11.2020<\/p>\n

Do you know that feeling when you use your favorite search engine with “this should be easy, someone will already have figured out how to do this” in mind?<\/p>\n

This is how my work on the topic I\u00b4m describing in this post started. And because this blogpost exists, you might assume correctly that this was not the case for the challenge I was facing:<\/p>\n

Silently uninstalling the McAfee LiveSafe bloatware<\/del> trial version on a fresh installed Windows 10 PC. (Seriously Microsoft – You should make Windows less expensive to the OEMs so they “don\u00b4t have to” sell space for crapware on their customers computers. How great would it be to have a clean Windows installed from the start for everyone? Customer Experience anyone? )<\/p>\n

While doing this manually might be (and probably is) the best solution for a single device, uninstalling this software from “Add\/Remove Programs” is not an option if you have to get rid of it on many PCs.<\/p>\n

Unfortunately McAfee seems to think that uninstalling their software should be really hard – they even put a captcha in the manual uninstall process!. They don\u00b4t provide any command line parameters or uninstall information besides “Use Add\/Remove programs” or “use the McAfee Consumer Products Removal Tool” with a Gui. Uninstalling via PowerShell did not work either.<\/p>\n

(For the Enterprise part of their software they provide a different tool called “Endpoint Product Removal Tool” , which seems to accept command line parameters.)<\/p>\n

So a little digging was needed to find out how to achieve the goal: A silent uninstall of McAfee LiveSafe (and all other McAfee Products)<\/strong><\/p>\n

Here\u00b4s is how to do it (please note that the solution is working today 03.11.2020 with McAfee LiveSafe Version 16.0R24)<\/p>\n

a) Download the McAfee Consumer Product Removal Tool (http:\/\/us.mcafee.com\/apps\/supporttools\/mcpr\/mcpr.asp<\/a> )<\/p>\n

b) Open an elevated PowerShell window<\/p>\n

c) Navigate to the folder you saved the MCPR.exe to.<\/p>\n

d) Start MCPR.exe and do not close the window, click next or click cancel. We just need the installer to extract the files we want to use.\"\"<\/a><\/p>\n

e) Navigate to your local appdata folder cd $Env:LocalAppdata\\Temp\u00a0<\/code><\/p>\n

\"\"<\/a><\/p>\n

f) Copy the folder “MCPR” to any other folder on your Harddrive (e.g. c:\\temp\\KillMcAfee)<\/p>\n

Because of the -Force Parameter, the folder will be created even if it does not exist.<\/p>\n

copy-item -Path .\\MCPR\\ -Destination c:\\temp\\KillMcAfee -Recurse -Force<\/code><\/p>\n

\"\"<\/a><\/p>\n

g) Navigate to the folder where you copied the data to.<\/p>\n

\"\"<\/a><\/p>\n

h) Close the still open Uninstall User Interface by clicking cancel<\/p>\n

\"\"<\/a><\/p>\n

i) Now that the Gui is closed, it\u00b4s time to uninstall McAfee LiveSafe without any Gui with PowerShell:<\/p>\n

.\\Mccleanup.exe -p StopServices,MFSY,PEF,MXD,CSP,Sustainability,MOCP,MFP,APPSTATS,Auth,EMproxy,FWdiver,HW,MAS,MAT,MBK,MCPR,McProxy,McSvcHost,VUL,MHN,MNA,MOBK,MPFP,MPFPCU,MPS,SHRED,MPSCU,MQC,MQCCU,MSAD,MSHR,MSK,MSKCU,MWL,NMC,RedirSvc,VS,REMEDIATION,MSC,YAP,TRUEKEY,LAM,PCB,Symlink,SafeConnect,MGS,WMIRemover,RESIDUE -v -s<\/code><\/p>\n

\"\"<\/a><\/p>\n

The uninstallation will take a while. I did not have to reboot but this might change in your environment.<\/p>\n

I assume you could specify single packages if you wanted to keep some McAfee products on your computer by removing them from the command (hence I don\u00b4t know why you would want this\u2026)<\/p>\n

j) Delete the folder if you don\u00b4t need it any more.<\/p>\n

Using this method, you can easily deploy the uninstallation to any number of PCs using your favorite software distribution tools (like Intune or Configuration Manager \ud83d\ude09 ). Just make sure to include the complete content of the MCPR-folder in your uninstall package.<\/p>\n

UPDATE 06.11.2020<\/strong><\/p>\n

One way of deploying this via Intune:<\/p>\n

a) create a batch file (e.g. Silent_uninstall.bat) in your MCPR-Folder<\/p>\n

\"\"<\/a><\/p>\n

b) pack the MCPR-folder as *.intunewin file with the Intune Content Prep Tool (GitHub – microsoft\/Microsoft-Win32-Content-Prep-Tool: A tool to wrap Win32 App and then it can be uploaded to Intune<\/a>)<\/p>\n

c) create a new application in Intune and assign it to a group of users or devices.<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

on the requirements page, create a requirement that checks if the McAfeee Registry key exists. This is one easy way to check if any McAfee software is installed. Please make sure the requirement fit\u00b4s for your environment.<\/p>\n

\"\"<\/a><\/p>\n

In the detection rules section we use the same registry key to check if it is gone. If yes, we assume the software is uninstalled. Again, check if that is a good solution for your environment.<\/p>\n

\"\"<\/a><\/p>\n

Finally assign it to a group of devices or users to get rid of McAfee LiveSafe.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

03.11.2020 Do you know that feeling when you use your favorite search engine with “this should be easy, someone will already have figured out how to do this” in mind? This is how my work on the topic I\u00b4m describing in this post started. And because this blogpost exists, you might assume correctly that this…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[138,7,164,167,14,15,23,174],"tags":[177,176,178,175],"_links":{"self":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/posts\/359"}],"collection":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=359"}],"version-history":[{"count":5,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/posts\/359\/revisions"}],"predecessor-version":[{"id":375,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/posts\/359\/revisions\/375"}],"wp:attachment":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}