1MethodofProcedureRevisionCUsingtheMcAfeeRemovalToolContentsConfidentialityNoticeIntroductionProcedureTroubleshootingMassdeployments2ConfidentialityNoticeThisdocumentanditscontentsareconfidentialandproprietarytoMcAfee,Inc.
andareintendedonlyfortheindividualorentityspecifiedhereinorotherwiseidentifiedbyMcAfee.
Unauthorizeduse,reproduction,ordistributionofthisdocumentoranyofitscontentsmayresultinlegalandfinancialpenalties.
3IntroductionTheMcAfeeRemoval(MFERemoval100.
exe)toolallowsyoutoremoveePOproductsfromcomputersinyournetwork.
WarningsandliabilityTheMFERemoval100.
exetoolisprovidedasabesteffortbyMcAfeesupport.
Thissoftware:HasnotbeentestedorapprovedbyMcAfee.
Shouldbetestedinyourlocalenvironmentbeforeyouattempttodeployittoyourusers.
Expiresandceasestofunctionafterthedateindicated.
Tofindtheexpirationdate:1.
Extractthestandaloneexecutable.
2.
Right-clicktheexecutablefileandclickProperties|General|Description.
SystemrequirementsThefollowingbasicrequirementsarerequiredoneachmachine:Windows5.
x-10.
xX86orx64AdministrativepermissionsNOTE:Ifrunningsyscore15.
7orhigher,youcanonlyremoveallproducts.
Itwillonlyrunwiththeproductswitch/all.
IfyourunningtheapplicationmanuallywithUACenabled,elevationisalsorequired.
Formoreinformation:http://msdn.
microsoft.
com/en-us/library/windows/desktop/aa511445.
aspxOtherdependencies:VerisignClass3PublicPrimaryCertificationAuthority–G5https://kc.
mcafee.
com/corporate/indexpage=content&id=KB870964ProcedureYoucanruntheMFERemoval100.
exetoolonyourlocalmachinebyrunningitfromthecommandline.
TaskRunMFERemoval100.
exeatthecommandlinewiththeappropriateswitches.
Switchesarenotcasesensitive.
/norebootWillnotcallreboot,overwrites/tand/forcereboot/forcerebootWillcallrebootuponcompletion/txxTimeinminutestodelayifrebootisneededor/forcerebootisused.
Defaultis10minutes.
Forexample,/t10/passHIPsclientUIpassword.
DoesnotworkwithHIPs7.
Forexample,/passabcde12345/qor/quietPreventsstatusmessageboxes.
IfdeployedfromePO,thisisautomaticallyset.
Whenspecified,theprocessexitswhenitcompletessuccessfully.
/customprops[1-4]Onlyonecustompropcanbeused.
Ifmorethanoneisprovided,thelastinthelistwillbetheoneused.
Onlynumbers1-4areallowed.
NospacesareallowedintheprovidedcustompropIf/custompropsissetandMcAfeeAgentisnotbeingremoved,thetoolwillattempttosetcustompropsthatcanbeusedlaterinePO.
Examples:1.
/customprops1AllDone2.
/customprops2mycustomprop3.
/customprops3VSEremoved4.
/customprops4MFERemovalRanOnProductswitches:/MA–McAfeeAgent/DLP–HostDataLossPrevention/HIP–HostIntrusionPrevention/VSE–VirusScanEnterprise/ENS–EndpointSecurity/DXL–McAfeeDataExchangeLayer/EIA–EndpointIntelligenceAgent/TIEM–McAfeeThreatIntelligenceExchangeModuleforVSE/MAR–McAfeeActiveResponse(RebootRequired)Oneormorearerequired.
5/MCP-McAfeeClientProxy/PA-McAfeePolicyAuditorAgent/DATRep–DATReputation/All–AllproductsForexample:Scenario1:Removeallproductsandrebootafter5minutesMFERemoval100.
exe/all/forceboot/t5Scenario2:RemoveVSEandHIP.
IncludetheHIPpassword.
MFERemoval100.
exe/vse/hip/passabcde12345orMFERemoval100.
exe/vse/hip/pass"abc123"Rebootyourcomputer.
Arebootisstronglyrecommendedifyouhaveremovedproductswiththeintentionofreinstallingthem.
RemovingHDLPandMARrequiresareboot.
Removingindividualproductsdoesnotrequireareboot.
Removingallproductsrequiresarebootifyouwanttoreinstallthemlater.
RequiredrebootOccurswhenremovingHDLPusingforceoptionorfiles/registrykeycouldnotberemoved.
MFERemovalperformscleanup.
Normalmode–Rebootoptionappearsinstatusbox.
Quietmode–MFERemoval100callsshutdown.
exewithatimespecified/t(defaultof10minutes).
Validtimefor/tare0-99.
/norebootcanbeusedtopreventanautomaticreboot.
RecommendedrebootOccurswhenservice/driverispendingareboot.
Normalmode–Rebootoptionappearsinstatusbox.
Quietmode–Noaction.
Note:/forcerebootand/norebootcommandlineswitcheswillbeoverwrittenbystatusboxpromptswhenrunlocally.
6TroubleshootingUsethestatusboxandlogfilestotroubleshooterrors.
SuccessanderrordeterminationWhentheapplicationcompletessuccessfully,adialogboxdisplayswiththefollowinginformation:TheresultsThepathtothelogfileRebootrecommendation(ifany)Also,theapplicationwritesagenericregistrykeythatcanbequeried.
Thekeyisdeletedatthestartofeachrun,andthenrewrittenwhentheprocessissuccessful.
Iftheregistrykeyismissing,youknowtherewasanerror.
LogsanddataTheMFERemoval100.
exetoolwritesdatatothefollowinglogs:Runtimelog–generatesto%SYSTEMROOT%\TEMP\McAfeelogs\Applet-YYYY.
MM.
DD–HH.
MM.
SS-[MFERemoval100.
exe].
txtEventlog–afterruntime,createsaWindowsApplicationEventLogentryfromsourceMFERemoval100.
exe.
EventIDs:o666–failureo777–successRegistrykeyTheregistrykeycanbefoundintheselocations,dependingonyourversionofWindows:X64HKEY_LOCAL_MACHINE\Software\Wow6432Node\MFERemovalX86HKEY_LOCAL_MACHINE\Software\MFERemovalRegistrykeyvalues:ValuenameFinishValuenameforeachproductremovedMAVSEHIPDLPENSDATRepTIEMDXLEIAMCPMARPAData17ActivityiconWhentheapplicationruns,theActivityicondisplaysintheWindowsNotificationArea.
ThisiconisawhiteIntellogoonabluebackground.
Thepurposeoftheiconistoindicatethattheapplicationisrunning.
FormoreinformationabouttheWindowsNotificationArea:http://msdn.
microsoft.
com/en-us/library/windows/desktop/aa511448.
aspxToviewtheWindowsNotificationArea:http://windows.
microsoft.
com/en-us/windows7/change-how-icons-appear-in-the-notification-areaReviewthelogfileWhentheprocesscompletessuccessfully,thelogreads:Exit:SuccessIfthismessageismissingfromthelog,youwillneedtocorrecttheerrororcontactyourIntelSecuritySupportrepresentative.
CommonerrorsYoucandiagnoseproblemsusingerrormessagesinthestatusboxorinthelogfile.
InvalidPassword.
Pleaseprovidepasswordasaswitch.
Example:MFERemoval.
exe/passabcde12345/passswitchwasprovidedanditwasincorrectIfthereisaspaceintheHIPpassword,usequotes:/pass"abcde12345"HIPSEnabled.
PleasedisableHIPsIPSandre-run.
OpenHIPclientUI,unlocktheGUI,anddisableIPS.
InePO,disableHostIPSviapolicyandpushdowntoclient.
Providepasswordviacommandlineswitch:/passabcde12345or/pass"abcde12345"VSEAPEnabled.
PleasedisableVSEAPandre-run.
OpenVSEConsoleanddisableAccessProtection.
InePO,disableVSEAPviapolicyandpushdowntoclient.
Failedtoinstallcertificate:4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5MFERemovaldependsonVerisignClass3PublicPrimaryCertificationAuthority–G5towork.
MFERemovalattemptedtoinstallacertificateandfailed.
Formoreinformation:https://kc.
mcafee.
com/corporate/indexpage=content&id=KB87096UnabletodisableprotectionMFERemovalwasunabletoestablishTrustwithMcAfeesoftware.
Otherreasons,includingfailedcertificateinstall.
ContactIntelSecuritysupport.
WorkaroundsTheseoptionsshouldonlybeusedasalastresort.
Youcanusethe/forceand/safemodeswitchestoremoveproductswhenyouencountererrors.
Alwaysusethe/allswitchwiththeseoptions.
Testtheseoptionsbeforeusingtheminamassdeployment/forceUse/forcetobypassallcheckandremoveallproducts.
McAfeerecommendsthisoption.
/force/all8Requiresareboot.
/safemodeUse/safemodetobootacomputerintosafemode,run,andthenrebootbackintonormalmode.
/safemode/allSafemodetroubleshootingDoesnotworkwithprebootauthentication.
RebootwouldleaveatPrebootscreentwice(oncetogointosafemodeandoncetobackintonormalmode)GPOcouldinterfereautologin–rebootwouldleaveatsafemodelog-inscreenhttps://technet.
microsoft.
com/en-us/magazine/ee872306.
aspxhttps://technet.
microsoft.
com/en-us/library/cc978776.
aspxGPOcouldaddbacklegalnoticecaption–wouldleaveatsafemodewaitingonaclickhttps://technet.
microsoft.
com/en-us/library/cc939712.
aspxDoesnotworkproperlyonDomainControllers.
Safemodeprocess1Createatempuserandaddittothelocaladmingroup.
2SettheOStobootintosafemode.
3Rebootafteroneminuteunless/tissettoanothertime.
4Bootintosafemode.
5RunMFERemoval100.
exe,deletetempuser,resetallsettings.
6Reboot.
7InNormalmode,deletetempuserprofile.
9ReinstallationofMcAfeeAgentIfMcAfeeAgentisoneoftheproductsthatisbeingremoved,thefollowingswitchescanbeusedtoreinstallMAaftertheremovaltooliscomplete.
Ifrebootiseitherrequiredorrecommended,theinstallofMAwillhappenontherestartofthesystem.
Note:ThetoolwillsetMAinstalltostart,itdoesnotguaranteethatitwillbesuccessful.
Alllogswillbeavailableinwindows\temp\mcafeelogs.
Useoneofthefollowingformatsandthetoolwillusethedefaultcommandlineof/install=agent/silenttoinstallframepkg.
exe.
Ifframepkg.
execannotbelocated,nothingwillhappen.
Refertothelogformoredetails.
/framepkgIfframepkg.
exeisinthesamedirectoryasthemferemovalbinary.
/framepkg="c:\pathtoframepkg.
exe"Iffilepathspecifiedisvalid.
Single(')ordouble(")quotescanbeusedaroundthepath.
YoucanspecifyacustompropforanewMAinstallation.
Onlyonecustompropcanbeused.
Ifmorethanoneisprovided,thelastinthelistwillbetheoneused.
Onlynumbers1-4areallowed.
Nospacesareallowedintheprovidedcustomprop.
Examples:1.
/customprops1AllDone2.
/customprops2mycustomprop3.
/customprops3MAcleaninstall4.
/customprops4MFERemovalRanOnIfotherframepkg.
execommandlineswitchesbeside/install=agent/silentandcustompropsareneeded,inadditiontothe/framepkgswitch,youcanyouadd:/framepkgcmd='thefullcommandlineparametersyouwouldliketopasstoframepkg'Note1:Singlequotes(')arerequiredatthestartandfinishofthiscommand.
Note2:Doesnotworkwith/custompropsswitch.
SeetheMcAfeeAgentProductGuideformoreinformationonframepkg.
exeinstallationquestions.
10MassdeploymentsYoucanupdatemorethanonecomputeratatime.
Toimplementamassdeploymentprocess,createacustomePOEndpointDeploymentKit(EEDK)packageanddeployitusingePO.
BeforeyoubeginEEDKpackagesarenotsupportedbyIntelSecuritysupport.
However,youcanvisittheMcAfeeCommunitysiteforinformationandsupport:https://community.
mcafee.
com/docs/DOC-3401ThecurrentversionofEEDKis9.
6.
1.
TaskCompletetheinitialsetup.
a.
Extractthezipfile.
b.
CreateanewfoldercalledBuild.
c.
RunEEDK.
exe.
d.
ClickTools|OptionandclickBrowse.
e.
SelectyourBuildfolderandclickSave.
CreatetheEEDKforMFERemoval100.
a.
SelectFile.
BrowsetoMFERemoval100.
exe.
b.
Specifythesoftwarepackageproperties.
11c.
ClickBuildPackage.
Astatusboxnotifiesyouwhenthenewzipiscreated.
ChecktheEEDKpackageintoePO.
a.
InePO,opentheMasterRepository.
b.
ClickCheckinPackage.
c.
Selectthepackagetype:ProductorUpdate(.
ZIP)d.
NexttoFilePath,clickBrowseandlocatetheEEDKpackage.
e.
ClickNext,choosethebranch,clickSave.
CreatetheclienttaskinePO.
a.
InePO,opentheClientTaskCatalog.
b.
SelectMcAfeeAgent.
c.
ClickNewTask.
d.
Selectthetasktype:ProductDeployment.
ClickOK.
e.
IntheTaskNamefield,enteraname.
f.
CompletetheoptionsforProductsandComponents.
Forexample,youcanaddaproductswitch:/vse.
ProductNameTypeaname.
Limitto8alphanumericcharacters.
ProductIDTypea4digitnumber.
ProductVersionTypetheversionnumber.
Use4digitsseparatedbyperiods.
ProductDescriptionEnterthedescriptionyouwanttoappearwhencreatingtheePOtask.
CommandtoRunEnterthenameoftheexecutablefile:MFERemoval100.
exe.
Note:IntelSecurityrecommendsusingcommandlineswitchesintheePOdeploymenttask.
AnyswitchthatyouuseisautomaticallyhardcodedandalwaysusedwhendeployedthroughePO.
Thismethodmakesiteasytoidentifytheproductsthatarebeingremovedbythetask.
ProductDetectionKeySpecifytheregistrylocationthatcontainstheProductDetectionKeyValue.
IntheEEDK,abbreviatethetop-levelkeylocations.
Forexample,HKEY_LOCAL_MACHINEisabbreviatedHKLM.
ProductDetectionKeyValueSpecifytheregistrykeyvalue.
Ifthiskeyvalueexistsonamachinethedeploymenttaskwillnotrun.
Thefieldcannotbeblank.
Scenario1:UsetheproductdetectionkeyMFERemovalandthenon-existentkeyvalueNew.
Because,thekeyvaluedoesnotexist,allcomputersareupdated.
Scenario2:UsetheproductdetectionkeyMFERemovalandthenon-existentkeyvalueFinish.
Because,thekeyvalueisalreadypresentoncomputersthathaveupdatedsuccessfully,onlycomputersthataremissingthekeyareupdated.
OSSupportSelectalloftheWindowsoperatingsystemsthatyousupport.
12Assignclienttasks.
CautionIncorrectlyassignedtaskscancausetheremovaltooltomakechangestoyourentirenetwork.
IfMcAfeeAgentisremoved,itmeansthatyourcomputersarenotprotectedbyePO.
IntelSecurityrecommendsassigningthetasktojustthenodesthatneedtoruntheremovalprocessorusingtag-basedclienttaskassignments.
CreateEEDKwithFramePkgYoucanalsocreatetheEEDKusingFramePkg.
exe.
Mostofthestepsarethesame.
UsingFramePkgallowsyoutoreinstallMcAfeeAgentaftersuccessfullyrunningamassdeployment.
BeforeyoubeginEachcustomerrequiresauniquecopyofframepkg.
exeYoumustuseoneofthefollowingMFERemoval100.
exeswitches:/MA,/ALL,or/SAFEMODETaskCompletetheinitialsetup.
a.
Createanewfolder.
b.
CopyMFERemoval100.
exeandFramepkg.
exetothenewfolder.
SetupEEDK.
a.
InEEDK,selectFolder.
b.
ClickBrowseandlocateyournewfolder.
c.
Specifythesoftwarepackageproperties.
ProductNameTypeaname.
Limitto8alphanumericcharacters.
ProductIDTypea4digitnumber.
ProductVersionTypetheversionnumber.
Use4digitsseparatedbyperiods.
ProductDescriptionEnterthedescriptionyouwanttoappearwhencreatingtheePOtask.
Forexample,MFERemovalwithMAinstall5.
03CommandtoRunEnterthenameoftheexecutablefile:MFERemoval100.
exe.
UsetheFramePkgswitches:/framepkg/framepkgcmd='cmdlineswitches'/customprops1MFERemovalRanOnForexample:MFERemoval.
exe/framepkg/customprops113MFERemovalRanOnProductDetectionKeySpecifytheregistrylocationthatcontainstheProductDetectionKeyValue.
IntheEEDK,abbreviatethetop-levelkeylocations.
Forexample,HKEY_LOCAL_MACHINEisabbreviatedHKLM.
ProductDetectionKeyValueSpecifytheregistrykeyvalue.
Ifthiskeyvalueexistsonamachinethedeploymenttaskwillnotrun.
Thefieldcannotbeblank.
Scenario1:UsetheproductdetectionkeyMFERemovalandthenon-existentkeyvalueNew.
Because,thekeyvaluedoesnotexist,allcomputersareupdated.
Scenario2:UsetheproductdetectionkeyMFERemovalandthenon-existentkeyvalueFinish.
Because,thekeyvalueisalreadypresentoncomputersthathaveupdatedsuccessfully,onlycomputersthataremissingthekeyareupdated.
OSSupportSelectalloftheWindowsoperatingsystemsthatyousupport.
d.
ClickBuildPackage.
Astatusboxnotifiesyouwhenthenewzipiscreated.
CheckinEEDKpackage.
CreatetheclienttaskinePO.
Assignclienttasks.
Afterthetaskrunssuccessfully,thecomputerrebootsandFramePkgattemptstoreinstallMA.
Ifthereisnoreboot,FramePkgwillrunautomatically.
NoteMFERemoval100cannotguaranteethereinstallationofMA.
Forallissues,contacttheappropriateMcAfeesupportteam.
Copyright2017McAfee,Inc.
www.
mcafee.
comMcAfeeandtheMcAfeelogoaretrademarks/registeredtrademarksofMcAfee,Inc.
Othernamesandbrandsmaybeclaimedasthepropertyofothers.
00-B
螢光云官網萤光云成立于2002年,是一家自有IDC的云厂商,主打高防云服务器产品。在国内有福州、北京、上海、台湾、香港CN2节点,还有华盛顿、河内、曼谷等海外节点。萤光云的高防云服务器自带50G防御,适合高防建站、游戏高防等业务。本次萤光云中秋云活动简单无套路,直接在原有价格上砍了一大刀,最低价格16元/月,而且有没有账户限制,新老客户都可以买,就是直接满满的诚意给大家送优惠了!官网首页:www....
RackNerd 商家给的感觉就是一直蹭节日热点,然后时不时通过修改配置结构不断的提供低价年付的VPS主机,不过他们家还是在做事的,这么两年多的发展,居然已经有新增至十几个数据中心,而且产品线发展也是比较丰富。比如也有独立服务器业务,不过在他们轮番的低价年付VPS主机活动下,他们的服务器估摸着销路不是太好的。这里,今天有看到RackNerd商家的独立服务器业务有促销。这次提供美国多个机房的高配独立...
介绍:御速云成立于2021年的国人商家,深圳市御速信息技术有限公司旗下品牌,为您提供安全可靠的弹性计算服务,随着业务需求的变化,您可以实时扩展或缩减计算资源,使用弹性云计算可以极大降低您的软硬件采购成本,简化IT运维工作。主要从事VPS、虚拟主机、CDN等云计算产品业务,适合建站、新手上车的值得选择,拥有华东江苏、华东山东等国内优质云产品;香港三网直连(电信CN2GIA联通移动CN2直连);美国高...
legalnoticecaption为你推荐
2019支付宝五福2019年1月25日今天的支付宝集五福了吗?access数据库修复求救,ACCESS数据库破坏了,怎么修复?波音737起飞爆胎飞机会爆胎?美要求解锁iPhone怎么用爱思手机助手解锁苹果手机?加多宝和王老吉王老吉和加多宝是什么关系闪拍网闪拍网之类的网站怎么回事?三五互联科技股份有限公司厦门三五互联科技股份有限公司 怎么样?即时通平台老司机进来 求个直播平台联系我们代码卸载失败!请联系我们帮助您解决!(错误代码13)--是什么情况oscommercewedopay的通道怎么样?
域名查询系统 西安电信测速 贵州电信宽带测速 java空间 全站静态化 创梦 91vps 昆明蜗牛家 空间登入 smtp服务器地址 免费稳定空间 服务器硬件配置 带宽测试 北京主机托管 香港ip windowsserver2008 windowsserverr2 hosts文件 压力测试工具 瓦工招聘 更多