Windows XP / 2003 1. Boot from Windows CD 2. Choose REPAIR (R) and select the installation to be repaired 3.

Type the password for the local Administrator 4. Enter the command: DEL C:\WINDOWS\system32\drivers\esecdrv42.sys 5. Enter the command: exit 6. Start Windows normally 7. Delete the following registry keys: HKLM\SYSTEM\CurrentControlSet\Services\EsecAgentSvc HKLM\SYSTEM\CurrentControlSet\Services\esecdrv HKLM\SYSTEM\CurrentControlSet\Services\esecdrv42 HKLM\SOFTWARE\GFI\EndPointSecurity4 8. Restart the computer 9. Delete the folder C:\Program Files\GFI\EndPointSecurity 4 Agent 10. Depending on the version of the agent, delete the registry keys as specified in Appendix A 11. From the GFI EndPointSecurity Console, remove the agent by selecting the option ?Delete computer(s) without uninstall? NOTE 1: In step 4, if the agent installed is version 4 or 4.1, the driver is called esecdrv.sys NOTE 2: In step 12, on x64 operating systems the GFI\EndPointSecurity registry key is located under HKLM\SOFTWARE\Wow6432Node\GFI Appendix A GFI EndPointSecurity 4.2 and 4.3 Builds:20100625 20100428 20091109 20091014 Keys: HKLM\SOFTWARE\Classes\Installer\Products\505AD1BC44D34744B81ED6B0071A1E23 and HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CB1DA505-3D44-44748BE1-6D0B70A1E132} GFI EndPointSecurity 4 and 4.1 Builds:20090508 20090217 20080215 Keys: HKLM\SOFTWARE\Classes\Installer\Products\09F8D729D7CAB5946B6907B2AD8DDEC7 and HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{927D8F90-AC7D-495BB696-702BDAD8ED7C} NOTE: On x64 operating systems, the Uninstall\{<GUID>} registry key is located under HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall