How to manually uninstall MailEssentials 2012 ( ONLY)

Answer

To remove the Services:

1. Open regedit.exe
2. Open HKLM\SYSTEM\CurrentControlSet\Services
3. Each key listed represents an individual service. Delete the following keys for MailEssentials 2012:

• gfiasmlhost
• gfiasmsecatt
• gfimetrxsvc
• gfipop2exch
• GFIScanM
• gfiscans
• listserv
• msecavupdate
• msecmlhost
• csecmlhost

To remove MailEssentials from restore points as well, you can delete any instances of these keys present in HKLM\SYSTTEM\ControlSet00x\Services. During normal operations this is an optional step.

GFI Registered files:

1. Open regedit.exe
2. If no other GFI Products are installed, delete the 'GFI' key from HKLM\SOFTWARE
3. If other products are installed, delete the HKLM\SOFTWARE\GFI\MailEssentials

Note that if you have a 64 bit machine, the path will be HKLM\SOFTWARE\WOW6432NODE\GFI\MailEssentials.

To remove MailEssentials 2012 from processing emails:

Exchange 2003/SMTP Event Sinks:

1. Open MetaEditor/MetaEdit , which can be downloaded here: http://download.microsoft.com/download/iis50/utility/5.0/nt45/en-us/mtaedt22.exe
    When you install this application only select to install the metaexplorer.
2. Note that before you delete the sink bindings, that you JUST DELETE THE BINDING REFERENCE. Deleting the sink event itself (i.e. F6628C...) instead of the binding event (i.e. 83D5BC...) could cause adverse issues for other applications that are bound to the SMTP event (i.e. FaxMaker).
3. Delete LM\SmtpSvc\<SMTPINSTANCE>\EventManager\EventTypes\{F6628C90-0D5E-11d2-AA68-00C04FA35B82}\Bindings\{83D5BC59-B6C8-4B77-88B0-B7CA8F3BA1AC}
4. Delete LM\SmtpSvc\<SMTPINSTANCE>\EventManager\EventTypes\{F6628C90-0D5E-11d2-AA68-00C04FA35B82}\Bindings\{2F0EF2E3-5A3E-40F6-B021-1BDDB43C35EF}
5. Delete LM\SmtpSvc\<SMTPINSTANCE>\EventManager\EventTypes\{FF3CAA23-00B9-11d2-9DFB-00C04FA322BA}\Bindings\{A7D837CC-6273-4DA0-8B83-AFFCC9942B2B}
6. Delete LM\SmtpSvc\<SMTPINSTANCE>\EventManager\EventTypes\{FF3CAA23-00B9-11d2-9DFB-00C04FA322BA}\Bindings\{5D631EE6-61BA-4F19-B7C3-4BAFB6A30876}

Exchange 2007/2010/2013 Transport Agents:

1. Start the Exchange Management Shell
2. Execute the following commandlets:
   • Uninstall-TransportAgent -Identity "GfiAsRtSubmittedAgent"
   • Uninstall-TransportAgent -Identity "GfiAsRtRoutedAgent"
   • Uninstall-TransportAgent -Identity "GfiAsSmtpAgent"
   • Uninstall-TransportAgent -Identity "GfiAsSmtp2Agent"
   • Uninstall-TransportAgent -Identity "GfiAvSmtpAgent"
   • Uninstall-TransportAgent -Identity "GfiAvRoutingAgent"
3. Answer [Y] Yes to confirm

Shared DLL counters:

1. Delete any values with the original installation path of MailEssentials from HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
2. Also, if no other GFI products are installed, delete any values with \<CommonFilesFolder>\GFI\common

From Add/remove programs:

1. Open regedit.exe
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products
3. The subkeys of this key are a bunch of letters and numbers. Go through these keys are remove the ones which have "ProductName" equal to GFI MailEssentials for Exchange/SMTP.
4. Do the same for the following key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
5. You will see a bunch of letters and numbers as subkeys of this key. Go through these keys are remove the ones which have "DisplayName" equal to GFI MailEssentials for Exchange/SMTP.
6. Some old registry keys may be located in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products
7. You can open the gfimes_xxxxxxxxx_x_maininstall.x86 log located in %temp% and look for the entry that lists the product , such as Product: {F09AEF50-299F-409F-85D4-D36C0EF2F2F9}
8. Then search the registry for F09AEF50-299F-409F-85D4-D36C0EF2F2F9 and remove any references.The installation should proceed at this point.

From Exchange VSAPI Scanning:

1. Open regedit.exe
2. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\VirusScan
3. Delete the VirusScan key