Manually uninstall Unified Agent

book

Article ID: 169376

calendar_today

Updated On:

Products

Web Security Service - WSS

Issue/Introduction

  • You want to manually uninstall the Unified Agent.
  • You cannot uninstall Unified Agent because you have forgotten the password.

Cause

Some of the installation files are embedded deep within the registry which does not allow the normal uninstall method

Resolution

Uninstall the Unified Agent with a password.

See KB article: Silently uninstall Unified Agent

Uninstall the Unified Agent without a password.

If the first step does not work, you need to remove some registry keys.

Note: Ensure that all keys and references are removed: 

  1. Remove the following registry keys:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bc-cloud-wfp 
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bcua-service 
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bcua-wfp 
    HKEY_LOCAL_MACHINE\SOFTWARE\Blue Coat Systems

    There are files located in HKEY CLASS ROOT, search the root or ‘’computer’’ for BCUA, delete anything that matches the search criteria. One symptom would be the installer reporting error ‘’ bcua_service.exe is not marked for installation’’. Deleting all reg keys including HKEY CLASS ROOT resolve this problem.
     
  2. Kill the following services in Windows Task Manager:

    Tasklist (looking for PID for bcua-service.exe and bcua-notifier.exe) 
    Taskkill /PID <pid#> /F
     
  3. Delete the following files and directories:

    C:\ProgramData\bcua (dir) *Note need to show all files and directories to see ProgramData. 
    C:\Program Files\Blue Coat Systems (dir) 
    C:\Windows\System32\drivers\bcua-wfp.sys (file)
     
  4. Search register for bcua and delete the entry or key that is associated with it. Also, delete the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\<some number>

    Notes:
    • Will have to look into each key to find the one that shows the display name as Unified Agent. This removes it from the installed programs. 
    • The Legacy driver data will fail to delete but does not affect the ability to remove the UA and install a new UA.
       
  5. After deleting the registry keys, restart the computer, and then delete the remaining files in the UA folder.

If you experience issues removing UA from the registry

  1. Use psexec.exe to remove the registry files Get psexec.exe from http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
  2. Create a shortcut with psexec.exe and edit the property file.
  3. Add toggles and parameter to psExec.exe >> psExec.exe -i -d -s c:\windows\regedit.exe
  4. After modifying psexec.exe, run it to launch regedit and delete the required keys.