Windows XP / 2003

1. Boot from Windows CD

2. Choose REPAIR (R) and select the installation to be repaired

3. Type the password for the local Administrator

4. Enter the command: DEL C:\WINDOWS\system32\drivers\esecdrv42.sys

5. Enter the command: exit

6. Start Windows normally

7. Delete the following registry keys:

HKLM\SYSTEM\CurrentControlSet\Services\EsecAgentSvc

HKLM\SYSTEM\CurrentControlSet\Services\esecdrv

HKLM\SYSTEM\CurrentControlSet\Services\esecdrv42

HKLM\SOFTWARE\GFI\EndPointSecurity4

8. Restart the computer

9. Delete the folder C:\Program Files\GFI\EndPointSecurity 4 Agent

10. Depending on the version of the agent, delete the registry keys as specified in Appendix A

11. From the GFI EndPointSecurity Console, remove the agent by selecting the option ?Delete computer(s) without uninstall?

NOTE 1: In step 4, if the agent installed is version 4 or 4.1, the driver is called esecdrv.sys

NOTE 2: In step 12, on x64 operating systems the GFI\EndPointSecurity registry key is located under HKLM\SOFTWARE\Wow6432Node\GFI

Appendix A

GFI EndPointSecurity 4.2 and 4.3

Builds:20100625 20100428 20091109 20091014

Keys:

HKLM\SOFTWARE\Classes\Installer\Products\505AD1BC44D34744B81ED6B0071A1E23 and

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CB1DA505-3D44-4474-8BE1-6D0B70A1E132}

GFI EndPointSecurity 4 and 4.1

Builds:20090508 20090217 20080215

Keys:

HKLM\SOFTWARE\Classes\Installer\Products\09F8D729D7CAB5946B6907B2AD8DDEC7 and

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{927D8F90-AC7D-495B-B696-702BDAD8ED7C}

NOTE: On x64 operating systems, the Uninstall\{<GUID>} registry key is located under HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall