UniversalForwarder
A guide to uninstall UniversalForwarder from your PC
You can find below details on how to uninstall UniversalForwarder for Windows. The Windows release was created by Splunk, Inc.. Check out here where you can read more on Splunk, Inc.. The program is usually found in the C:\Program Files\SplunkUniversalForwarder directory. Take into account that this path can vary being determined by the user's decision. The full command line for uninstalling UniversalForwarder is MsiExec.exe /X{1CA252F3-7317-4021-B678-141BB5D3E3FF}. Keep in mind that if you will type this command in Start / Run Note you might receive a notification for admin rights. The application's main executable file has a size of 85.44 KB (87488 bytes) on disk and is titled btool.exe.The following executable files are contained in UniversalForwarder. They take 220.51 MB (231217624 bytes) on disk.
- btool.exe (85.44 KB)
- btprobe.exe (85.45 KB)
- classify.exe (85.44 KB)
- openssl.exe (504.45 KB)
- splunk-admon.exe (17.08 MB)
- splunk-compresstool.exe (80.94 KB)
- splunk-MonitorNoHandle.exe (17.01 MB)
- splunk-netmon.exe (17.11 MB)
- splunk-perfmon.exe (17.15 MB)
- splunk-powershell.exe (17.09 MB)
- splunk-regmon.exe (17.15 MB)
- splunk-winevtlog.exe (17.25 MB)
- splunk-winhostinfo.exe (17.02 MB)
- splunk-winprintmon.exe (17.06 MB)
- splunk-wmi.exe (17.01 MB)
- splunk.exe (522.45 KB)
- splunkd.exe (48.06 MB)
- srm.exe (179.45 KB)
The information on this page is only about version 8.2.7.1 of UniversalForwarder. You can find here a few links to other UniversalForwarder versions:
- 6.3.8.0
- 9.0.3.1
- 8.1.5.0
- 6.3.2.0
- 8.1.8.0
- 8.2.6.0
- 7.0.2.0
- 7.2.6.0
- 6.6.7.0
- 9.0.2.0
- 8.2.10.0
- 7.0.3.0
- 8.2.5.0
- 8.2.4.0
- 8.0.1.0
- 6.3.3.4
- 8.0.3.0
- 6.5.1.0
- 8.0.2.0
- 6.2.1.245427
- 6.2.3.264376
- 7.3.7.0
- 7.2.9.1
- 8.1.0.1
- 7.1.0.0
- 6.2.0.237341
- 7.2.5.1
- 7.2.4.0
- 8.2.6.1
- 9.2.0.1
- 6.4.0.0
- 6.0.3.204106
- 6.6.0.0
- 7.0.1.0
- 8.2.12.0
- 8.1.2.0
- 6.5.2.0
- 8.1.3.0
- 7.1.6.0
- 9.1.3.0
- 7.3.0.0
- 7.3.4.0
- 6.5.3.0
- 7.1.1.0
- 8.0.5.0
- 7.2.10.1
- 7.0.0.0
- 9.0.0.1
- 7.3.5.0
- 9.0.4.0
- 7.2.4.2
- 7.1.4.0
- 7.3.3.0
- 6.6.5.0
- 8.2.0.0
- 8.2.8.0
- 8.2.1.0
- 9.1.1.0
- 7.0.4.0
- 8.2.7.0
- 6.3.3.0
- 7.3.6.0
- 7.2.7.0
- 9.1.2.0
- 6.6.3.0
- 8.0.6.0
- 6.2.4.271043
- 6.4.1.0
- 7.3.2.0
- 7.3.9.0
- 6.3.5.0
- 9.0.0.0
- 9.2.0.0
- 7.3.8.0
- 8.2.11.0
- 7.1.3.0
- 6.4.2.0
- 9.0.5.0
- 7.1.2.0
- 7.2.0.0
- 8.2.2.1
- 7.2.5.0
- 7.3.1.1
- 8.2.3.0
- 8.2.2.0
- 7.2.1.0
- 6.6.6.0
- 6.1.3.220630
- 6.4.8.0
- 9.1.0.1
- 7.0.11.0
- 6.4.9.0
- 9.0.1.0
- 6.4.7.0
- 8.0.4.0
- 6.6.2.0
- 6.1.5.239630
- 6.4.11.0
- 7.3.7.1
- 8.0.0.0
After the uninstall process, the application leaves leftovers on the computer. Part_A few of these are shown below.
Folders found on disk after you uninstall UniversalForwarder from your computer:
- C:\Program Files\SplunkUniversalForwarder
Generally, the following files are left on disk:
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-console-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-datetime-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-debug-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-errorhandling-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l1-2-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l2-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-handle-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-heap-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-interlocked-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-libraryloader-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-localization-l1-2-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-memory-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-namedpipe-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processenvironment-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processthreads-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processthreads-l1-1-1.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-profile-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-string-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-synch-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-synch-l1-2-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-sysinfo-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-timezone-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-util-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-conio-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-convert-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-environment-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-filesystem-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-heap-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-locale-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-math-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-multibyte-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-private-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-process-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-runtime-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-stdio-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-string-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-time-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-utility-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\archive.dll
- C:\Program Files\SplunkUniversalForwarder\bin\bson-1.0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\btool.exe
- C:\Program Files\SplunkUniversalForwarder\bin\btprobe.exe
- C:\Program Files\SplunkUniversalForwarder\bin\classify.exe
- C:\Program Files\SplunkUniversalForwarder\bin\copyright.txt
- C:\Program Files\SplunkUniversalForwarder\bin\genRootCA.bat
- C:\Program Files\SplunkUniversalForwarder\bin\libeay32.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libexslt.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxml2.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxmlsec.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxmlsec-openssl.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxslt.dll
- C:\Program Files\SplunkUniversalForwarder\bin\msvcp140.dll
- C:\Program Files\SplunkUniversalForwarder\bin\openssl.exe
- C:\Program Files\SplunkUniversalForwarder\bin\PyWinTypes37.dll
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\readme.txt
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-admon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-MonitorNoHandle.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-netmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-perfmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-powershell.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-powershell2.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-regmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winevtlog.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winhostmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winprintmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-wmi.path
- C:\Program Files\SplunkUniversalForwarder\bin\slim
- C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv.cat
- C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv.inf
- C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv.sys
- C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-compresstool.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunkd.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.cat
- C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf
- C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.sys
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunkmonitornohandledrv.cat
- C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandleDrv.inf
- C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandleDrv.sys
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.ps1
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell-common.ps1
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell-ls.psm1
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-regmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-winhostinfo.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe
- C:\Program Files\SplunkUniversalForwarder\bin\srm.exe
- C:\Program Files\SplunkUniversalForwarder\bin\ssleay32.dll
- C:\Program Files\SplunkUniversalForwarder\bin\ucrtbase.dll
- C:\Program Files\SplunkUniversalForwarder\bin\vcruntime140.dll
- C:\Program Files\SplunkUniversalForwarder\copyright.txt
- C:\Program Files\SplunkUniversalForwarder\etc\apps\IA-AG-deploymentclient-all\local\app.conf
Use regedit.exe to manually remove from the Windows Registry the keys below:
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3F252AC1713712046B8741B15B3D3EFF
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1CA252F3-7317-4021-B678-141BB5D3E3FF}
Additional registry values that you should delete:
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3F252AC1713712046B8741B15B3D3EFF\ProductName
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SplunkUniversalForwarder\
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\windows\Installer\{1CA252F3-7317-4021-B678-141BB5D3E3FF}\
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SplunkForwarder\ImagePath
How to delete UniversalForwarder from your computer with Advanced Uninstaller PRO
UniversalForwarder is an application by the software company Splunk, Inc.. Frequently, people want to erase this program. Sometimes this is troublesome because removing this manually takes some knowledge related to removing Windows applications by hand. The best QUICK procedure to erase UniversalForwarder is to use Advanced Uninstaller PRO. Here are some detailed instructions about how to do this:1. If you don't have Advanced Uninstaller PRO on your PC, install it. This is good because Advanced Uninstaller PRO is one of the best uninstaller and all around utility to optimize your computer.
DOWNLOAD NOW
- navigate to Download Link
- download the setup by clicking on the green DOWNLOAD button
- install Advanced Uninstaller PRO
3. Click on the General Tools button
4. Click on the Uninstall Programs tool
5. All the programs existing on your computer will be shown to you
6. Navigate the list of programs until you locate UniversalForwarder or simply click the Search feature and type in "UniversalForwarder". If it is installed on your PC the UniversalForwarder application will be found automatically. After you select UniversalForwarder in the list of applications, some data about the application is shown to you:
- Star rating (in the lower left corner). This tells you the opinion other users have about UniversalForwarder, from "Highly recommended" to "Very dangerous".
- Reviews by other users - Click on the Read reviews button.
- Details about the app you are about to remove, by clicking on the Properties button.
8. After uninstalling UniversalForwarder, Advanced Uninstaller PRO will ask you to run a cleanup. Press Next to proceed with the cleanup. All the items that belong UniversalForwarder which have been left behind will be found and you will be asked if you want to delete them. By uninstalling UniversalForwarder using Advanced Uninstaller PRO, you are assured that no Windows registry entries, files or directories are left behind on your disk.
Your Windows computer will remain clean, speedy and ready to run without errors or problems.
Disclaimer
The text above is not a piece of advice to uninstall UniversalForwarder by Splunk, Inc. from your PC, we are not saying that UniversalForwarder by Splunk, Inc. is not a good application for your computer. This page only contains detailed info on how to uninstall UniversalForwarder in case you decide this is what you want to do. The information above contains registry and disk entries that Advanced Uninstaller PRO discovered and classified as "leftovers" on other users' PCs.
2023-05-13 / Written by Daniel Statescu for Advanced Uninstaller PRO
follow @DanielStatescuLast update on: 2023-05-13 10:30:23.957