Post reply

Name:
Email:
Subject:
Message icon:

Verification:
Type the letters shown in the picture
Listen to the letters / Request another image

Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

shortcuts: hit alt+s to submit/post or alt+p to preview


Topic Summary

Posted by: hazedaze
« on: 18. September 2011., 13:37:04 »

To be fair Jhensen is quite right you should always go to your Admin, but as a side note you dont really want to be circumventing the Network security it is there for a reason regardless of how much of a pain in the ass it is.

That also means trying to remove DLP is really not wise for you, most companies these day's get you to agree to a computer usage policy and by you removing or disabling elements of the program that is desinged primarily to protect you will land you with a possible meeting with your manager for breach of this policy, every company's diff but it really is not worth your job.....period! :o

Autorun Virus and Trojans have made a huge comback as a result of an increase in removable devices and sloppy Admins not removing the Autorun facility within the Registry on Corp Builds, this one little change will scuppure most Viruses and any decent AV program will clean the little blighter as soon as you access the device hence the term "On-Access Scan" sometimes only a Format will surfice as some more stubbon Viruses will cause a stack overflow within the Explorer Shell so will cause your desktop to essentially reboot (Simple way of looking at it is that it looks a bit like your loggin off but withouht the message boxes e.t.c) preventing you from even access the device, you may even have to Format it through Safe Mode but this is not recomended as your AV will likely not be running in Safe Mode so will not protect you, YOU HAVE BEEN WARNED.

if you modify the reg keys e.t.c dependent on the Log settings set via the EPO admin it can easily be flagged back to the Server and will often invoke a Policy enforcement which will remove any changes you have made and this will happen every time you log onto the company network unless they have it set at certain intervals of course, (Reduces network loading at certain times E.t.c)

Again to to assist with the question raised by Teojosh, there is a little hack you can try mate I dont recomend it for anything else but have used this little method for several shall we say "stubbon" programs Encountered in the past, you should providing you have taken control of the McAfee folder within Program files be able to simply right click on the folder and delete but let it sit in the recyle bin never delete it untill you have perfromed serveral reboots to ensure everything still works,

now when you go back to Add/Remove programes when you hit the remove button it should give you a small error to advise it could'nt find the program and do you want it to be removed form the Add/Remove list just hit yes, do a reboot and check to see if any McAfee services are running withing Proceses withing Task Manager.

It may be prudent at this stage to run the MCafee Software removal program just to clean the system up a bit!  ;D

Any Probs post back and I will assist now I'm back on the Scene........

Regds

HD

Posted by: jheysen
« on: 20. June 2011., 21:32:16 »

Contact you ePO administrator. I'll think you'll need an ePO task to uninstall it.
Posted by: tanya123
« on: 20. June 2011., 18:52:10 »

By any chance.. your PC is not managed via ePO, right?
As a matter of fact, it is managed via ePO.
Its just that I have too much of emails, proprietary softwares, data and stuff to want to format and have a clean drive on my C:\

Any help to remove Mcafee DLP would be greatly appreciated.
ANYONE???
Posted by: jheysen
« on: 16. June 2011., 05:23:06 »

By any chance.. your PC is not managed via ePO, right?
Posted by: tanya123
« on: 16. June 2011., 05:15:03 »

Hi Hazedaze,

Am using Windows Vista.
Tried your method by going into safemode of my machine.
Was able to change registry entries and rename the files but was unable to find the following entries in registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv1\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv2\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv3\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv4\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv5\ [START]

Also, my USB MAss Storage device works but ONLY in safemode, not after regular login whether with Administrator account or any other account. This happens despite the fact that DLP is disabled on startup in regular user account mode.
Also, am unable to uninstall DLP, whether in safe mode or in any other mode.
While trying to uninstall in safe mode, I get an error message, and while trying to uninstal in regular mode, I am still asked the Challenge Key.

Please advise on how to uninstall DLP while in regular mode/ safe mode.

Thanx,

Tanya
Posted by: mcafeevictim
« on: 07. January 2011., 18:11:43 »

Hi hazedaze

I am facing the same situation and followed the procedures you mentioned. Strange thing happens, all the USB drives become inactive. But i still boot windows though. I tried uninstalling, still does not work and asks the password as before. there is no DLP agent on taskbar though. Do you have any suggestions.

Thank you in advance
Posted by: micahnc
« on: 02. December 2010., 17:37:47 »

No rush on this :)
Posted by: micahnc
« on: 02. December 2010., 17:36:56 »

Hey there hazedaze; thanks for the great info. was able to take control (and verified permissions) of/for all the files
am getting error message in regedit for each of the line items you list;
 
Error Editing Value
           Cannot edit Start: Error writing the value's new contents.
                                    
                                         OK

Any further assistance is greatly appreciated.  Thanks to you and all.
 :thumbsup:
Posted by: hazedaze
« on: 02. December 2010., 12:47:00 »

Hi Guys,

Sorry for the delay, it's been a frantic few months since my last visit to SC Forum!!!,

Ok In regards to DLP this will not just disble it temperarily so that you can use your phone it will disbale it permantly!!

if your not on a corperate machine then your be fine but if you are then good luck explaing it your local IT guy!!

Ok now down to the nitty gritty, you need to know how to edit/change regisry settings so for this guide I will assume you know how to do this.. Please see the procedure I have used in the past below,
-----------------------------------------------------------------------------------------------------------------

Cant Uninstall DLP withought Password:

In order to fix this you have to follow the instructions below before you will be able to run the un-install process for the agent:

Disabling the registry keys related to DLP:

Click Start, Run, type Regedit and press ENTER.

Navigate to each of the following keys, right-click each one, select Modify and set the Value Data to 4:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfeeDLPAgentService\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv1\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv2\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv3\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv4\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fcdrv5\ [START]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfeeFramework\ [START]



Rename the following files in the Agent directory:
Navigate to: C:\Program Files\McAfee\DLP\Agent.
Locate the following files:

fcag.exe
fcags.exe
fcagt.exe
fcagte.exe


Right-click each file, select Rename and add .BAK to the end of the file name.
Restart the client computer.

The DLP agent now will not load when the pc restarts. To uninstall the DLP Agent you should find you can now use the add and remove prgrams option if not post back and I will assist further as it has been a while since I have needed to use this so I may have missed something! (hey were all human!! ;D)

Hope this helps all!!

Regards

HD

 :up:


P.s I almost forgot to say you may need to take ownership of the .exe files shown above befor you can modify them especially in Win 7 and Vista due to the way user accounts are used in the new O/S. Again if your not sure how to do this then please post back and me or Samker will assist where poss.
Posted by: Pez
« on: 13. October 2010., 22:47:58 »

Posted by: micahnc
« on: 08. October 2010., 14:59:01 »

I am adding my additional request for a solution to this issue. I inherited this notebook which has McAfee anti-virus.  I uninstalled two of the three programs using add remove from Control Panel.  BUT, when it comes to uninstalling the DPL Agent I am greeted with "Use the following challenge key to generate the uninstall."  No clue how to answer the challenge and I cannot remove the agent without it.  Is there a work around?  I could really use the 67 Megabytes this is taking up.  Any assistance would be greatly appreciated. It's a personal notebook and I do not need this level of protection.
Posted by: Samker
« on: 22. September 2010., 19:57:31 »

hi,
i have the same problem - i cant disable DLP agent.
the reason way i need it.... i have N86 Phone (nokia) and i cant plug it to my pc, cant detect it.
can u help my with that?

Thanx
Itzik.

Hi Itzik and Welcome to SCF Community.

I hope that "hazedaze" will reply in next few days, if not try to send him Private Message (PM) via SCforum. ;)

Best Regards,

S.

Posted by: itzikh
« on: 21. September 2010., 07:07:18 »

hi,
i have the same problem - i cant disable DLP agent.
the reason way i need it.... i have N86 Phone (nokia) and i cant plug it to my pc, cant detect it.
can u help my with that?

Thanx
Itzik.
Posted by: hazedaze
« on: 16. April 2010., 14:27:07 »

Hi TheoJosh,

As Samker Has asked can you do the above??

Is there a perticular reason for wanting to remove this tool??

I have a procedure for removing or disabling the services but I'd like to know the reasons behind it first just for my own peace of mind that your not a user trying to cercumvent the company's security!  ;D

If you reply then I shall provide the procedure for you..

Kind Regards

HD
Posted by: Samker
« on: 12. April 2010., 23:01:28 »

I'm running McAfee 8.7i enterprise version with McAfee DLP software installed.  It requires a code in order for the DLP to be removed.  Can you remove it manually from the Windows XP registry? if yes, how?  Thank you for your help.

Hi Tj,

did you try to remove DLP through Add / Remove Programs??

Also I need information did you have administrator privileges at PC?

Regards,

S.
Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising