McAfee Removal Tool User Guide

mcafee removal tool
mcafee removal tool

McAfee Removal Tool is useful for removing McAfee antivirus software cleanly from your computer.

Sometimes you run into problems while trying to remove McAfee products.

A standard uninstall is like leaving something either a file or a registry key that affects the performance of your computer.

Here you will be guided on how to remove McAfee program cleanly without causing other problems.


McAfee Tool Removal Guide

This guide can also be used to fix problematic uninstalls and reinstall the McAfee program.

Here are the Steps to remove McAfee products from your PC:

  • Turn off other programs to avoid possible conflicts with McAfee programs.
  • Use the uninstall features in Windows: Start – Control Panel – Programs and Features.
  • Select the McAfee product from the list of programs and click the “Uninstall” button.
  • Restart your computer.


This is the standard guide for uninstalling most programs. If you want to completely and cleanly remove any other McAfee antivirus program or software from your computer, do the following:

  • Download the McAfee Consumer Product Removal Tool.
  • Right-click and select “Run as Administrator” on the MCPR.exe file.
  • Select “Next” on the first screen.
  • At the license prompt select the “Agree” button, then select the “Next” button.
  • Type the appropriate characters on the computer screen for Security Validation.
  • Select the “Next” button.
  • The blue bar with the caption “removing product MSAD” indicates the process of searching for the McAfee program.
  • Wait for the McAfee program removal process to complete.
  • Once done, select the “Restart” button and click the “Yes” button to confirm.


McAfee removal tool has removed all McAfee programs that were installed when you finished rebooting your PC.

Try running another program to test, if you have problems then run the removal tool again.


McAfee Endpoint Product Removal Tool

If you are using the McAfee Endpoint Product Removal Tool then make sure your computer meets the following system requirements:

  • Windows 7 SP1 and above.
  • Windows Server 2008 R2 SP1 and above (Server Core versions are not supported).
  • X86 or x64.
  • Administrator rights.
McAfee Total Protection
McAfee Total Protection

You can run the McAfee Removal Tool on your computer by running it from the command line or using the graphical user interface.

The following is a list of arguments and actions that are generated when executed using the command line:


Argument Rem oval Orde r Action
None N/A This will open the graphical user


accepteula N/A Mandatory. If not supplied EPR will not


–ALL N/A Remove all supported McAfee products
–VSE 1 Remove only VirusScan Enterprise
–TIEM 2 Remove only Threat Intelligence

Exchange Module for VSE

–HIPS 3 Remove only Host Intrusion Prevention
–SAE 4 Remove only SiteAdvisor Enterprise
–DLP 5 Remove only Data Loss Prevention
–MAR 6 Removes only McAfee Active Response
–ENS 7 Remove only McAfee Endpoint Security
–DATRep 8 Remove only DAT Reputation
–MCP 9 Removes only McAfee Client Proxy
–MVISION_EP 10 Removes only MVISION Endpoint
–PA 11 Remove only Policy Auditor
–EIA 12 Remove only Endpoint Intelligence Agent
–FRP 13 Removes only McAfee File and Removable Media Protection Note: McAfee Endpoint Encryption KeyStore files (*.sks) are preserved by default.

These are local encryption keys created

–MNE 14 Removes only McAfee Management of Native Encryption

Note: MNE and MA will not be removed if the Network Unlock authentication

–MDE 15 Removes only McAfee Drive Encryption

Note: If MDE is active MDE and MA will not be removed

–MACC 16 Removes only McAfee Application and Change Control

Note: If MACC is active, it will not be

–DXL 18 Remove only Data Exchange Layer
–MA 19 Remove only McAfee Agent
–STINGER 20 Remove only McAfee Stinger
–EPOMER 21 Remove only ePO-MER
–MOVE 22 Remove only MOVE multiplatform deployment
–BRUTEFORCE=REMOVE_ACTIVE_MNE N/A Force removal of MNE regardless of the status of the “CanRemove” flag value
–BRUTEFORCE= REMOVE_PROTECTED_MA N/A Force removal of MA regardless of the presence of MNE or MDE.
–BRUTEFORCE= REMOVE_ACTIVE_MNE_AND_MA N/A Force removal of MNE and MA regardless of the status of the “CanRemove” flag value
–DELETEFRPKEYS N/A If provided, McAfee Endpoint Encryption KeyStore files (*.sks) will be deleted.
–NOREBOOT N/A If provided, the McAfee Endpoint Product Removal tool will not restart the computer after removing the selected
–NOTELEMETRY N/A As part of product removal, EPR will send product removal telemetry to McAfee. If this switch is provided, no telemetry is sent.
–T=<number of minutes to wait> N/A Allows the user to set the amount of time to wait (in minutes) before restarting the client post product removal. (Note: This argument will be ignored if used in conjunction with “–noreboot”)
–BRUTEFORCE= MFEDEEPREM_FOLDER_ATP_STOP N/A Used to work around issues where ENS ATP’s $MfeDeepRem folder is not removed. This will cause EPR to stop the ATP service prior to deletion of the folder.







N/A McAfee endpoint products created after July 2019 are signed with a certificate issued by the Certificate Authority GlobalSign. If the GlogalSign root certificate is not installed on the endpoint, then McAfee products will not install, and the Endpoint Product Removal tool may not work correctly. To use this feature, the user must accept the EULA and use the command line parameter: — installcert=globalsign (SHA256) or – installcert=globalsign_r1 (SHA-1). If the certificate is present or disabled, it will reinstall an enabled certificate. No reboot is required after installing the certificate.

Support for installing other potentially required root certificates is also provided via command line parameters. The verisign-g5, usertrust_rsa, sectigo_aaa and DigiCert root certificates are supported in addition to GlobalSign certificates.








N/A When used, EPR will invoke the ENS repair feature, which replaces the installed files from the ENS installer and sets some registry entries to default. This is potentially useful as a less invasive method of resolving issues. This is a comma separated list (no spaces).


–REPAIR=wc – This will repair Web Control.

–REPAIR=ens_platform,fw,tp,atp – this will repair ENS Platform, Firewall, Threat Prevention, Adaptive Threat Prevention – in the order that the options were supplied.

–REPAIR=ens – this will repair all ENS modules. If modules can’t be found and no unexpected failure occurs, the repair will still be deemed a success.

–REPAIR=,tp,,fw,notaproduct,ens, – this will repair Threat Prevention, Firewall and then all ENS, but will report a fail, because there are empty products (redundant commas) and ‘notaproduct’ is not a valid option.

–BRUTEFORCE= DELETE_LEGACY_SETTINGS N/A After migration from VirusScan Enterprise or Host IPS to Endpoint Security, migrated settings and exclusions are stored in C:\ProgramData\McAfee\Endpoint Security\McAfeeSettingsBackup\. Since this is a protected location, if removal of these files is desired, EPR is the recommended method of using this. The EULA must be accepted, so the full command line would be –accepteula — noreboot — bruteforce=Delete_Legacy_Settings.



Use the McAfee Removal Tool guide above to completely remove the McAfee program and antivirus software.

However, if you are still having trouble, please visit the McAfee Community Forum or contact McAfee Technical Support for assistance.


1 thought on “McAfee Removal Tool User Guide”

Leave a Comment

%d bloggers like this:
Available for Amazon Prime