Dealing with persistent on-access scan messages from McAfee can be incredibly frustrating. You might have tried disabling real-time scanning through the user interface, but these notifications keep popping up, interrupting your workflow. If you’re looking for a more definitive way to stop these messages and ensure McAfee services are truly disabled, this guide will walk you through a process using Safe Mode and the command prompt to remove McAfee’s core files.
While this method is effective, it’s crucial to understand that it involves deleting system files. Therefore, before proceeding, it is strongly recommended that you back up your entire storage drive and have access to your BitLocker keys if your drives are encrypted. This ensures you can restore your system in case anything goes wrong.
Boot into Safe Mode
Safe Mode starts Windows in a basic state, using a limited set of files and drivers. This is essential because it prevents McAfee’s services from fully running and blocking file deletion, which is often the case in normal Windows mode.
- Access Recovery Options: Navigate to
Settings > Update & Security > Recovery
. - Advanced Startup: Under
Advanced startup
, click onRestart now
. Your computer will restart and present you with the recovery options menu. - Troubleshoot: In the
Choose an option
screen, selectTroubleshoot
. - Advanced Options: Next, go to
Advanced options
. - Command Prompt: Choose
Command Prompt
from the advanced options. Your system will likely reboot again. During the startup, you might need to press F4 for Safe Mode or F5 for Safe Mode with Networking, although networking is generally not required for this process.
Once you’ve selected Command Prompt, your computer will restart and boot into the command prompt environment.
Command Prompt File Deletion
You’ll likely start in the X:WindowsSystem32
directory within the command prompt. To proceed, you need to navigate to your C: drive where Windows and McAfee are installed.
-
Navigate to C: Drive: Type
cd /
and press Enter. Then typeC:
and press Enter. This will switch you to the root of your C: drive. -
Identify McAfee Directories: McAfee files are typically located in several directories. Based on common installation paths, you should check the following locations:
C:Program FilesMcAfee
C:Program FilesMcAfee.com
C:Program FilesCommon FilesAV
C:Program FilesCommon FilesMcAfee
C:Program Files (x86)Common FilesMcAfee
C:Program Files (x86)McAfee
C:ProgramDataMcAfee
- It’s also possible to have McAfee-related files in other locations depending on your PC vendor or specific installation.
-
Delete McAfee Files: For each of the McAfee directories you identified, use the following commands:
cd <McAfee directory path>
(e.g.,cd C:Program FilesMcAfee
) to enter the directory.del /s /q *
to delete all files and subdirectories within the current directory.
WARNING: *Be extremely careful when using the `del /s /q ` command. Double-check that you are in the correct McAfee directory before executing this command. This command forcefully and silently deletes all files and folders within the current directory and all its subdirectories.**
Alternatively, you can use
rmdir /s /q <McAfee directory path>
(e.g.,rmdir /s /q "C:Program FilesMcAfee"
) which will remove the directory itself and all its contents. Ensure you use quotes if the directory path contains spaces. -
Exit Command Prompt: After deleting files from all relevant McAfee directories, type
exit
and press Enter to close the command prompt. -
Reboot Windows: Choose to
Continue to Windows
or simply restart your computer.
Verify McAfee is Disabled
After rebooting into normal Windows mode, you can verify that McAfee services are no longer running:
- Task Manager: Press
Ctrl + Shift + Esc
to open Task Manager. Go to theStartup
tab and theServices
tab. Check for any McAfee-related processes or services. They should not be running or listed. - Services.msc: Press
Win + R
, typeservices.msc
, and press Enter. This opens the Services window. Scroll through the list and look for any McAfee services. They should not be running, and their startup type should ideally be set toDisabled
(although they might still be present in the list).
By deleting McAfee’s core files in Safe Mode, you’ve effectively prevented its services from starting up, thus stopping the persistent on-access scan messages. While the services themselves might still be listed in Windows, they will not be active, resolving the issue of intrusive notifications. Remember to consider alternative antivirus solutions to protect your system if you choose to remove McAfee completely.