Uninstalling Norton in 10.3

[lnp]

So I was working with a computer over spring break and the user wanted to install Virex (which came with their mac.com account) and uninstall Norton System Works. I tried running the uninstaller with the program and it didn't work. Evidentially this is a known issue with Norton and they've made a special uninstaller for 10.3. However, when I try to launch this uninstaller, the pogram launches and then promptly quits. No "unexpectedly quit", it just doesn't run.

So, I was wondering what files (other than the ones that appear in the application folder) I need to delete to get rid of Nortons such that it doesn't interfere with Virex and its activities. However, since the program has angered me, I want to delete the whole thing and all its components. Any tips?

[trees]

If they feel you need a formal removal tool they may have spread files all over the place. Removing all of the them could be a tough one, so getting the removal tool to work is still your best bet. First thing I'd look for is to remove any preferences (or other files) associated with the 'bad' removal application. You can look in the preferences directories inside both the users library directory and the system level library. then try it again.

[trees]

Oh. By the way.
Norton sucks.

[lnp]

Yeah. I figured that out. I think the worst part was talking the user through the process over the phone using a tech sheet I found from Symantec. In anycase, I think we've got most of it out, at least anything that would try and fight Virex. I guess my next question is this: I know Norton sucks, but what's another good general mac disk utility that's as user friendly?

[amichel]

Oh. By the way.
Norton sucks.
Very constructive. :D

Well, if your uninstaller is trash3d, I'd start by checking for kernel modules it installs. This is gonna get hardcore, so put on your hacker shirt and get a stout ale.

Pop a term out and type:
sudo su -

Type your password, and congratulations, you are now ROOT! All hail.

now, break out:
kextstat

This will list all running kernel modules. Look for anything with a com.norton or com.symantec. If you don't see anything, then that's awesome. If you do see something, you unload kernel modules like this:
cd /System/Library/Extensions
ls -l

That'll list all the kernel extensions you've got installed. Look for one with a Norton or a Symantec in the name. It'll be something.kext. Unload it like this:
kextunload something.kext

You should get a message:
kextunload: unload kext something.kext succeeded

If you get some error, no idea what to do. Scary stuff man. Reinstall time.

After that, start digging. Look for anything that says Norton or Symantec in /System/Library, /Library, /Library/Application Support, /Library/StartupItems. Also, check in /Library/Receipts for a .pkg with a Norton or Symantec in the name or any sort of installer log for Norton. You might find a nice log of the whole install process. In the .pkgs, you'll have to work hard. Once inside, cd to Contents and read the Info.plist file. You can use the plist editor if you installed the developer tools (/Developer/Applications/Utilities/Property List Editor.app) to read them, it'll give you a much nicer interface, otherwise, it's nasty XML, and you get to read it in a text editor like less or TextEdit.app if you like. Dig around all over in the .pkg and look for file names. Never know what you'll find.

Beyond that, I have no idea. This is hardly a friendly method, but if you have no recourse, it's something to try. You might dig around in the Norton forums on their website or the Apple Support Forums on Apple's site and see if anyone has worked this out themselves. If you're having the problem, chances are someone else is having/has had the problem.

Luck be with you, sir.

[jmcgon]

Oh. By the way.
Norton sucks.

i couldn't have said it better myself :D

[amichel]

Disclaimer:
Adam Michel (heretofor refered to as "The Poster") disclaims all responsibility for damage caused by the above post. The Poster has provided information that represents and contains the power to make a computer very unhappy. Unloading kernel modules is not for the faint of heart, and unloading the wrong module may well cause serious OS problems. Just cause The Poster said it, don't mean you gotta do it. Ph34r with great ph34r. Digging around in Library folders is also dangerous. Delete with care. If you have serious issues, plug some large external storage device in, and save all the important stuff. Do this BEFORE you hack, while Finder still works. Look around and find all your seriously important installer CDs. Find your OSX discs. That way, when you trash the machine, and you may, you're all ready for a reinstall. The Poster recommends that if you're hacking on someone else's machine, don't. Don't do anything. When you break it, they won't understand, and if you have a soul, you'll feel crappy about destroying their machine, and you'll want to fix it, and then you'll be there forever trying to reinstall all their software and recover all their documents. The Poster is hereby removed from blame and recourse.

But if it works, monetary donations and public adulation are appreciated.

[lnp]

Adam, your advice was basically what the tech sheet from Symantec had written on it, so it all worked out okay. Thanks for the advice.

[dparm]

Oh. By the way.
Norton sucks.

On the PC, I think SystemWorks is a great suite. Perhaps they don't put as much time into it for the Mac?

[powellm]

I thought you Mac guys didn't need AV software...

[jmcgon]

norton security suite (sysworks) is a bloated pos. sorry, i give it up for zonealarm security suite. low system usage and doesnt run 15 useless processes at once like nort. bleh just realized this is the mac forum. *shivers* ;)

[lnp]

I thought you Mac guys didn't need AV software...

It's not just about AV stuff. Its about having a disk utility too. But there are a few mac viruses out there. Moreover, a responsible mac user needs anti-virus protection to prevent the forwarding of viruses through e-mail attachments and the like. I work a lot of projects with PC people and the attachments they send me often contain viruses that I eliminate from our workflow. Until I get another attachment from the virus guy that is.

[powellm]

norton security suite (sysworks) is a bloated pos. sorry, i give it up for zonealarm security suite. low system usage and doesnt run 15 useless processes at once like nort. bleh just realized this is the mac forum. *shivers* ;)

I'll agree that Systemworks can be a little bloated, but if you know what you're doing, and what processes to kill, you can actually tune it up quite nicely.

[jmcgon]

I'll agree that Systemworks can be a little bloated, but if you know what you're doing, and what processes to kill, you can actually tune it up quite nicely.

but 99% of the ppl who use it have no idea how to do that so its rather inefficient :(