An old friend contacted me today and asked me to help him to remove a virus infection on his desktop. I checked his computer and there is an enterprise version of antivirus called Symantec Endpoint Protection (SEP) installed but there were no Symantec Endpoint Protection Manager which acts as a server to manage the SEP clients on the network. It is possible that the Symantec Endpoint Protection is installed as an unmanaged client but the virus definition hasn’t been updated for a very long time and I couldn’t manually update the signature from the LiveUpdate program. I may as well uninstall the Symantec Endpoint Protection since it couldn’t update the virus definition to detect the latest virus and replace it with a free antivirus such as Avira, Avast, AVG or Microsoft Security Essentials.
I went to Control Panel and ran the Programs and Features shortcut icon. Found Symantec Endpoint Protection and I clicked on the Remove button. The progress bar ran for a while and a dialog box pop out saying “Please enter the uninstall password“.
I asked my friend and he don’t know the password. The Norton Removal Tool only works on home products but not for enterprise products. It is not possible for me to install any other type of antivirus if i do not remove the Symantec Endpoint Protection client first. Even if I could, it is still not advisable to be running two different antivirus at the same time which can cause conflict and slow down of the system. After research, I found out how to remove the password so that I can uninstall Symantec Endpoint Protection. The first step that you should do is try a few possible password. Some of the most common password being used for Symantec Endpoint Protection are:
If none of the password above worked for you, continue reading and we’ll show you step by step on how to clear the password by simply deleting a registry key. The registry key is protected from modification by Symantec Endpoint Protection. In order to delete the registry key, you will need to stop the Symantec Endpoint Protection service first.
1. Click the Start button, type cmd in the Search programs and files bar, hold Ctrl+Shift and press Enter. Click the Yes button on the User Account Control window.
2. Type start smc -stop in the command prompt and press Enter.
3. Download this registry file and run it (SmcInstData.reg) on your computer to remove the password. You can now proceed to uninstall Symantec Endpoint Protection. Alternatively, you can also manually delete the registry key by following the instructions below if you do not want to use the registry file that we’ve created for your convenience.
3a. Again click the Start button, this time type regedit and press Enter.
3b. Navigate to the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC
3c. Look for “SmcInstData” at the right pane, right click on it and select Delete. Click Yes to confirm the registry key deletion.
You can now uninstall Symantec Endpoint Protection without being prompted to enter a password. If for some reason you’re unable to successfully stop the Symantec Endpoint Protection service from step 2, please follow the instructions below for an alternative method in stopping the service.
1. Download this registry file (SepMasterService.reg) to your computer.
2. Boot the computer into Safe Mode.
3. Run the SepMasterService.reg file that you’ve downloaded from step 1 by double clicking on it.
4. Restart your computer and uninstall Symantec Endpoint Protection from Control Panel. You will not be prompted to enter a password.
Basically the SepMasterService.reg file changes the startup type of the SepMasterService service from Automatic to Manual. If you are familiar with modifying the Windows registry, you can manually do it yourself by changing the Start registry key value data from 2 to 3 at the path below:
Once you’ve successfully removed Symantec Endpoint Protection, here are some of our recommendations to the best antivirus to keep your computer safe from malware.