Remove McAfee from Windows 11: GUI, Winget, and MCPR Steps

If McAfee arrived on your Windows 11 PC as trialware, OEM bloat, or a manually installed security suite and you want it gone without leaving behind drivers, services, or nagging popups, there are three dependable paths to a complete removal: the built‑in Settings GUI, the Windows Package Manager (winget) for a fast command‑line uninstall, and McAfee’s official Consumer Product Removal tool (MCPR) for a deep cleanup. Combined, these methods let you uninstall visible apps, scrub leftover drivers and scheduled tasks, and verify that Windows Defender (or your replacement AV) has returned to duty. ]

Background / Overview​

McAfee products commonly appear on new laptops from major OEMs and may be presented under names like McAfee Total Protection, McAfee LiveSafe, McAfee AntiVirus Plus, McAfee WebAdvisor, or smaller companion components. These installers often add kernel‑level drivers, Windows services, scheduled tasks, browser extensions, and registry keys that can persist after a simple uninstall. That’s why a two‑stage approach—regular uninstall cleanup sweep—is the safest route to a truly clean system.
Before you start, understand two operational facts:

• Removing a third‑party AV will leave the system without that specific vendor’s real‑time protection. Windows Security (Microsoft Defender) usually reactivates automatically after the third‑party soluti should confirm protection is active.
• McAfee installs low‑level compoire a restart to unload. Many uninstallers will prompt for or force a reboot to finish removing kernel drivers and background services.

---

Preparation — safety and housekeeping (5 minutes)​

Do these before attempting removal—small steps that avoid most troubleshooting headaches.

• Confirm you are signed into an administrator account.
• Create a System Restore point: Start → search “Create a restore point” → System Protection → Create. Label it clearly (e.g., Before McAfee removal).
• Save open work and close all apps. If McAfee has a system tray icon, right‑click → Exit before starting.
• Note the exact McAfen Settings → Apps → Installed apps; you’ll need that string or the winget package ID for the command‑line method.
• If you pay for McAfee, consider logging into your McAfee account to confirm subscription/renewal settings and to get your deactivation/transfer options in order.

---

Method 1 — Uninstall McAfee via Settings (GUI)​

This is the easiest path and works for most users.

Steps (quick GUI)​

• Press Win + I to open Settings.
• Go to Apps → Installed apps.
• Type “McAfee” in the search box to filter installed entries.
• Click the three‑dot menu (⋯) for each McAfee entry and choose Uninstall, then follow the McAfee uninstall wizard prompts and choose Yes nts* when prompted.
• Reboot when prompted to allow drivers and services to be unloaded.

Strengths and limitations​

• Strengths: Visual, easy, suitable for nontechnical users.
• Limitations: The built‑in uninstaller can leave behind registry keys, drivers, scheduled tasks, or empty folders—especially wlan to follow up with a cleanup pass if you still see McAfee remnants.

---

Method 2 — Remove McAfee with winget (command line)​

For power users, sysadmins, and scriptable workflows, winget (Windows Package Manager) provides a repeatable, automatable uninstall path that can target package IDs precisely.

Why use winget?​

• Precise: you can target the exact package ID instead of guessing product names.
• Fast and scriptable: ideal for multi‑PC rollouts and automation.
• It can call each product’s native uninstaller, so the removal experience is the same as GUI but controlled from the terminal.

Steps (winget)​

• Open an elevated terminal: right‑click Start → Windows Terminal (Admin).
• List McAfee packages:
• winget list --name McAfee
• Or broaden the search: winget list | findstr /i McAfee
• Use the exact Id shown in the list and uninstall:
• winget uninstall --id "McAfee.TotalProtection"
• If you run into a Microsoft Store EULA prompt, add --source winget to restrict the source and avoid the prompt.
• Re components (WebAdvisor, Security Scan Plus, etc.) until winget list returns no McAfee entries.
• Reboot to complete driver and service removal:
• sRestarting to complete McAfee removal" (this gives 30 seconds to save work).

Notes and caveats​

• If winget shows nothing, the OEM may have registered McAfee under a GUID or custom installer; fall back to the Settings GUI or MCPR.
• Winget is best for speed, precision, and scripting. Use it in PowerShell scripts for batches of devices.

---

Method 3 — Deep cleanup with McAfee MCPR (official removal tool)​

ll fails or you find leftovers after removing the visible apps, McAfee’s MCPR (McAfee Consumer Product Removal) tool is the official, recommended second pass. MCPR scans for McAfee traces—drivers, services, scheduled tasks, and registry entries—and removes them. It always requires a reboot to finalize cleanup.

When to use MCPR​

• After a standard uninstall if you still see McAfee elements.
• If the McAfee uninstaller freezes, errors, or refuses to run.
• When you need to ensure there are no leftovers that could block other AV installs.

How to run MCPR — step by step​

• Download the latest MCPR.exe (official McAfee removal toost recent copy.
• Double‑click MCPR.exe. Approve the UAC prompt when asked.
• Click Next, accept the End User License Agreement, and enter the CAPTCHA (case‑sensitive) before clicking Next. The CAPTCHA prevents automated misuse.
• Let MCPR scan and run (typically 2–5 minutes). When it reports Cleanup Successful, click Restart.
• After reboot, confirm McAfee components are gone.

Troubleshooting MCPR: common failure modes​

• MCPR may appear to hang if active McAfee processes are still runncAfee processes in Task Manager (or use taskkill /IM <processname> /F) or reboot into Safe Mode and rerun MCPR. Community reporting identifies worker processes such as sediag.exe or mcshield as offenders in some cases—terminate with caution.
• If MCPR reports Access Denied when deleting fil the folder (Properties → Security → Advanced → Change owner) or use takeown /F "<folder>" /A and icacls "<folder>" /grant Administrators:F before retrying. Use this only when you understand ownership/permissions basics. y Launch Anti‑Malware) drivers can block deletion. If MCPR fails for this reason, boot to Windows Advanced Startup, temporarily disable Early Launch Anti‑Malware protection for the session, run MCPR, then reboot normally. Proceed carefully—these settings protect boot integrity.

---

Verifying a complete removal — checklist and commands​

After any uninstall path, verify systematically rather than assuming success.

• Settings → Apps → Installed apps: searothing should remain.
• Check winget list: winget list --name McAfee — no results expected.
• Services: Press Win + R → services.msc and look for services with “McAfee” or common service names (McAfee Application Installer, McAWFwk, mccspsvc, mcapexe). No McAfee services should be present. If you find orphaned services, note their short name and remove with `sc delete <Serion and only after verifying the service is truly orphaned.
• Task Manager: Ctrl + Shift + Esc → Processes & Startup tabs — no McAfee processes or startup entries should remain.
• Scheduled tasks: Task Scheduler → Task Scheduler Library → look for McAfee tasks and delete if present.
• Files and folders: Common folders to check and remove (only if empty and nonessential): C:\Program Files\McAfee, C:\ProgramData\McAfee, and C:\Prfee. Use administrative privileges and be careful not to delete unrelated files.

Advanced verification tools for troubleshooting:

• Autoruns (Sysinternals) to find leftover auto‑start entries.
• pnputil /enum-drivers to list installed drivers; look for McAfee‑named OEM drivers and remove if safe.
• regedit to inspect HKLM\SOFTWARE\McAfee, HKLM\SYSTEM\CurrentControlSet\Services\<McAfeeService> entries—delete only if you are experienced and you have a restore point. Always export keys before editing registry.

---

Advanced cleanup — manual removals and registry care​

If remnants persist after MCPR, an advanced cleanup may be necessary. These steps are for experienced users and IT pros only.

• Boot to Safe Mode and take full ownership of stubborn folders wacls`, then delete them.
• Remove orphaned services with sc delete <ServiceName> after verifying the service is not used by other software.
• Use Autoruns to find and disable leftover drivers, scheduled tasks, or browser helper objects.
• Carefully remove registry keys: export the key first (File → Export) then delete eFTWARE\McAfeeandHKLM\SYSTEM\CurrentControlSet\Services` for confirmed McAfee services. Beware: deleting the wrong registry key can corrupt the OS.

Flag: any manual driver, service, or registry edits carry resure, stop and ask for help on a support forum or engage a technician.

---

Troubleshooting common scenarios (practical fixes)​

• MCPR “stuck” at a removal step: reboot and re-run; kill McAfee processes in Task Manager or run MCPR from Safe Mode.
• Uninstaller refuses to launch: try from an elevated command prompt or run MCPR. If an OEM used a custom installer registered under a GUID, use winget without --source winget or remove via Settings → Apps.
• Browser extensions (WebAdvisor) still present: remove extensions inside each browser (Edge, Chrome, Firefox) and check for leftover McAfee helper processes.
• Reinstall / Repair loop: if McAfee prevents reinstallation of a replacement AV, full MCPR cleanup plus driver/service checks are typically required before the new AV will install cleanly.

---

Security and subscription considerations​

• After removing McAfee, ensure Windows Security (Microsoft Defender) is active or install your chosen replacement. Defender usually re‑enables automatically, but confirm real‑time protection and virus definitions are up to date.
• If you have a paid McAfee subscription, log into your McAfee account and manage cancellations/renewals to avoid future charges. Removing the app does not necessarily cancel a subscription.
• If you depended on McAfee for specific features (VPN, password manager, identity protection), make a plan to replace those services.

---

OEM nuances and enterprise automation​

• OEM machines sometimes ship McAfee under nonstandard names or GUIDs; winget may not surface those or MCPR if winget returns nothing.
• For enterprise rollouts, build a PowerShell script that:
• Runs `wingfee IDs,
• Executes winget uninstall --id for each via silent install if MCPR supports unattended modes (check MCPR licensing/usage details), and
• Reboots and verifies withService` filtering on service DisplayName for “McAfee”. Always test thoroughly on a staging image first.

---

Final checklist before you call it done​

• [ ] No McAfee entries in Settings → Apps.
• [ ] winget list shows no McAfee packages.
• [ ] No McAfee services in Services.msc.
• [ ] No McAfee processes in Task Manager or startup.
• [ ] No McAfee scheduled tasks in Task Scheduler.
• [ ] Files/folders under Program Files / ProgramData deleted or empty.
• [ ] Windows Security or alternative AV active and up to date.

---

Conclusion​

Removing McAfee from Windows 11 —or stubborn—depending on how it was installed. Start with the Settings GUI for simplicity, use winget for speed and automation, and keep MCPR in your toolkit as the official cleanup tool to catch everything the native uninstaller might leave behind. After removal, run a short verification checklist and confirm Windows Defender or another AV is active before you return to regular use. For persistent leftovers or complex enterprise lifecycles, prefer a controlled, scripted approach combined with a tested restore point or disk image—manual registry and driver edits are effective but risky, and should be reserved for experienced administrators. Follow these steps and you’ll reclaim storage, silence renewal popups, and leave the system clean and ready for whatever security solution you choose next.

---

Source: Analytics Insight How Do You Remove McAfee from Windows 11? Proven Methods to Check

Removing McAfee from a Windows 11 PC is usually straightforward—but getting a truly clean uninstall free of drivers, scheduled tasks, registry remnants, and background services takes a deliberate, verifiable process. Here’s a practical, technician-grade guide that walks you through every dependable method (Settings GUI, winget, MCPR, and manual cleanup), explains what each tool does, and shows how to confirm the product is gone so your system is left secure and lean. This article synthesizes hands‑on procedure with vendor documentation and community troubleshooting so you can remove McAfee safely and with confidence. rview
McAfee frequently ships as trialware on new laptops and OEM systems under names such as McAfee Total Protection, McAfee LiveSafe, McAfee AntiVirus Plus, McAfee WebAdvisor, or smaller helper components like Security Scan Plus. Uninstalling the visible app often removes the core program, but many users find leftover files, kernel drivers, scheduled tasks, or registry keys remain and continue to produce popups or resource use afterward. A complete removal normally requires a two‑step approach: remove the main product and then perform a deep cleanup pass.
Before you start, tacts:

• Removing McAfee will leave the system without that specific third‑party protection; Windows Security (Microsoft Defender) typically becomes the active protection once a third‑party AV is removed, but you should confirm this after uninstall.
• Some McAfee components install kernel drivers and background services that require a reboot to unload. Plan for a brief downrk before beginning.

---

Quick checklist (pre‑uninstall)​

Do these quick preparatory steps before attempting removal:

• Sign into an Administrator account.
• Create a System Restore point (Start → Create a restore point → System Protection → Create).
• Close all apps and exit the McAfee UI if it’s running (right‑click tray icon → Exit).
• Note the exact product names shown in Settings → Apps → Installed apps (you’ll need these for winget or manual checks).
• Ensure you have an alternative antivirus plan (Defender auto‑enables in many cases) or be ready to reinstall a repl

---

Method 1 — Settings (Apps & features): the simple GUI uninstall​

This is the path most users will try first: it’s visual and easy.

Steps​

• Press Win + I → Apps → Installed apps (or Settings → Apps → Apps & features).
• Search the list for “McAfee.”
• For each McAfee entry (Total Protection, LiveSafe, WebAdvisor, etc.), click the three‑dot menu and select Uninstall.
• Follow the vendor uninstall wizard prompts and accept any “Remove all components” options.
• Reboot when prompted.

This method removes the main program using McAfee’s built‑in uninstaller. For many users this is sufficient, but it often leaves behind scheduled tasks, empty folders, or registry remnants. McAfee itself recommends a follow‑up pass with its MCPR tool when a standard uninstall doesn’t fully clear everything. ([support.microsoft.microsoft.com/en-us/windows/uninstall-or-remove-apps-and-programs-in-windows-4b55f974-2cc6-2d2b-d092-5905080eaf98)

---

Method 2 — Winget: fast, scriptable, precise (power users & sysadmins)​

The Windows Package Manager (winget) provides a repeatable, scriptable way to list and remove packages from the command line. It’s ideal for power users, batch removals, or when GUI uninstallers misbehave.

What winget does and caveats​

• winget can call underlying uninstallers for listed packages and supports identifying apps by Name, ID, or Product Code. The uninstall command has options such as --id, --exact, --source, and --force for precision.
• winget is distributed with the App Installer and is available on Windows 11 and modern Windows 10 builds, but its presence can vary by image or OEM provisioning. If winget is not recognized, install or repair App Installer from the Microsoft Store or use the GitHub release. Don’t assume it is present on every fresh machine without checking.

Winget commands — worked example​

• Open an elevated terminal (Windows Terminal or PowerShell as Administrator).
• List McAfee packages:
• winget list --name McAfee
• Or a broader search if that returns nothing: winget list | findstr /i mcafee
• Uninstall an identified package by its exact ID or Name:
• winget uninstall --id "McAfee.TotalProtection" --exact --force --source winget
• Repeat for other McAfee components (WebAdvisor, Security Scan, etc.).
• Reboot: shutdown /r /t 30 /c "Restarting to complete McAfee removal"

If winget doesn’t show McAfee, the OEM may have installed a custom GUID or used a silent OEM installer; in that case, fall back to Settings or MCPR. The Microsoft documentation explains the uninstall flags and the --source winget trick to avoid Microsoft Store EULA prompts.

---

Method 3 — MCPR (McAfee Consumer Product Removal): the deep wipe​

When ordinary uninstalls leave traces or the uninstaller fails, McAfee’s MCPR tool is the official remediation utility designed to scrub residual files, drivers, scheduled tasks, and registry entries.

What MCPR does​

• MCPR scans for installed McAfee consumer products and removes leftover components that ordinary uninstallers may not clear. It requires administrative rights and a reboot to finalize. Always download the most recent MCPR version before you run it.

How to run MCPR (concise steps)​

• Download MCPR.exe from McAfee’s official support location (always fetch a fresh copy).
• Close open programs and right‑click MCPR.exe → Run as administrator.
• Accept the EULA and complete the CAPTCHA when requested.
• Let the tool scan and remove remnants (this typically takes a few minutes).
• When prompted, restart the PC.
• Save the log MCPR provides after completion if you need evidence of removal.

Note: MCPR targets consumer products; enterprise McAfee installations (ePolicy Orchestrator / ENS / MVISION) use separate enterprise removal procedures and tools. Community reports show MCPR succeeds in the majority of consumer cases but can struggle on heavily modified OEM images or enterprise agent installs—if MCPR returns a failure, additional manual cleanup or a full re‑image could be necessary.

---

Manual cleanup: verifying and removing leftovers​

Even after winget + MCPR, verify these common locations and items to ensure a clean system.

Standard places to check​

• Files and folders (administrator required):
• C:\Program Files\McAfee
• C:\Program Files (x86)\McAfee
• C:\ProgramData\McAfee
• Scheduled Tasks: open Task Scheduler → Task Scheduler Library → remove any McAfee tasks.
• Services: open services.msc → look for McAfee services (e.g., McAfeeFramework, MFEAV, mfevtp) and stop then delete only if you’re sure they belong to McAfee.
• Drivers: check Device Manager (View → Show hidden devices) for; uninstall if present.
• Registry (advanced users only): search HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER for McAfee keys. Export keys before deletion.

How to take ownership (if you get “Access denied”)​

• Ri→ Properties → Security → Advanced.
• Change the Owner to your user account and check “Replace owner on subcontainers and objects.”
• Apply and then delete the folder.

Caution: manual deletion of drivers or services carries risk. Confirm the target belongs to McAfee, and only remove registry keys if you are comfortable with possible system recovery steps (System Restore or full image backup recommended).

---

How to prove McAfee is fully removed — verification checklist​

After performing one or more uninstall passes and a reboot, run these checks:

• Settings → Apps → Installed apps: no McAfee entries remain.
• Task Manager → Startup and Processes: no running McAfee processes.
• Services (services.msc): no McAfee services le system: the Program Files and ProgramData McAfee folders are removed or empty.
• Task Scheduler: McAfee scheduling tasks are gone.
• Windows Security: verify Microsoft Defender or your chosen AV is active. If you expect Defender to be your replacement, confirm Real‑time protection is On.
• Run a full antivirus scan with the active AV to confirm the system is clean.

---

Troubleshooting common failure modes​

• Uninstaller hangs or refuses to run
• Boot to Safe Mode and attempt the uninstall or run MCPR there. Safe Mode prevents many McAfee services from loading.
• winget reports nothing for McAfee
• OEM images sometimes register apps under GUIDs or nonstandard names. R commands or use Settings/MCPR. Reset winget sources (winget source reset --force) if winget only lists Microsoft Store items.
• MCPR fails or reports “Cleanup Unsuccessful”
• Ensure you used the latest MCPR copy and that you ran it as Administrator. Some enterprise components or corrupted installs may require manual removal or a reimage. Community threads and vendor support sometimes recommend full refreshes for stubborn cases.
• “Access Denied” deleting files
• Take ownership via Advanced Security settings, or use a trusted boot environment to remove files. Always backup first.

---

Security considerations and risks​

• Temporary exposure: during uninstall and until a replacement AV (or Defender) is active, the device might be more exposed. Coity** re‑enabled state (or install a replacement) immediately after removal. Defender normally activates when a third‑party antivirus is absent, but do verify.
• Enterprise vs consumer: MCPR is intended for consumer products. If the PC runs McAfee enterprise agents (ENS, ePO, MVISION), follow your IT team’s removal procedure — consumer tools can leave enterprise remnants or violate policy.
• Manual edits: deleting services, drivers, or registry keys incorrectly can destabilize the OS. Use manual removals only when comfortable with recovery tools like System Restore or a system image.
• Privacy/performance claims: vendors and third‑party articles may claim performance gains or privacy improvements after removal; those benefits vary by system and usage. If you removed McAfee due to performance concerns, measure before/after with Task Manager or Resource Monitor to confirm improvements.

---

Alternatives and what to do next​

If you’re removing McAfee because you want a different protection solution, consider these options:

• Re‑enable or confirm Microsoft Defender: it’s integrated, free, and auto‑activates for most users who have no other AV installed. It's a sensible default for home PCs.
• Third‑party AV options if you want additional features:
• Bitdefender (consumer and business options)
• Kaspersky Security Cloud (free tier available regionally)
• ESET or Norton (commercial offerings)
• After uninstall, run a full scan with the chosen AV and confirm definitions are up to date.

---

Final recommendations — an efficient, repeatable workflow​

• Create a System Restore point and back up critical files.
• Try the Settings GUI uninstall first for each visible McAfee component. Reboot.
• If remnants or services remain, run winget to remove identified package IDs in bulk (great for multiple machines). Reboot.
• Run MCPR as the final pass to catch stubborn drivers and registry entries. Reboot when prompted.
• Run the verification checklist (folders, services, Task Scheduler, Defender status).
• If errors persist, escalate to manual cleanup with care or contact McAfee support—or, for enterprise installs, consult your IT policy.

This combination—GUI uninstall, winget for speed and repeatability, and MCPR for a deep wipe—covers the vast majority of consumer cases and ifiable, clean system free from McAfee remnants. Community and vendor guidance converge on the same recommendation: use MCPR when standard uninstall methods leave artifacts, and use winget for scripted or multi‑machine workflows.

---

When to ask for help​

• If MCPR reports an error it cannot fix.
• If services or drivers remain and you get persistent “Access denied” errors after attempting owner changes.
• If the machine is managed by corporate IT—stop and consult IT to avoid policy conflicts.
• If system stability degrades after manual edits—use System Restore or reimage if necessary.

---

Removing McAfee on Windows 11 is a solvable, repeatable task when you combine the right tools: Settings for accessibility, winget for fast, scriptable removal across machines, and MCPR as the official “clean sweep.” Confirm removal by checking the Program lists, services, scheduled tasks, and file system paths, and ensure Windows Security or another active AV is protecting the machine after the process finishes. For most consumer systems this workflow will produce a complete, auditable uninstall; for complex or enterprise‑managed systems, coordinate with support and use enterprise removal tools instead.

---

Source: Analytics Insight How Do You Remove McAfee from Windows 11? Proven Methods to Check