UniversalForwarder

A way to uninstall UniversalForwarder from your system

UniversalForwarder is a computer program. This page contains details on how to uninstall it from your computer. The Windows release was created by Splunk, Inc.. More info about Splunk, Inc. can be seen here. The program is frequently found in the C:\Program Files\SplunkUniversalForwarder folder. Keep in mind that this location can vary depending on the user's choice. UniversalForwarder's entire uninstall command line is MsiExec.exe /X{72DACFB4-EDE8-4579-9C31-DD78B4DD61DB}. UniversalForwarder's main file takes about 81.32 KB (83272 bytes) and is called btool.exe.

The executable files below are part of UniversalForwarder. They occupy about 391.72 MB (410747808 bytes) on disk.

• btool.exe (81.32 KB)
• btprobe.exe (81.32 KB)
• classify.exe (81.32 KB)
• compsup.exe (139.45 MB)
• openssl.exe (498.32 KB)
• splunk-admon.exe (18.59 MB)
• splunk-compresstool.exe (74.82 KB)
• splunk-MonitorNoHandle.exe (18.51 MB)
• splunk-netmon.exe (18.63 MB)
• splunk-perfmon.exe (18.66 MB)
• splunk-powershell.exe (18.59 MB)
• splunk-regmon.exe (18.64 MB)
• splunk-tlsd.exe (1.24 MB)
• splunk-winevtlog.exe (18.77 MB)
• splunk-winhostinfo.exe (18.51 MB)
• splunk-winprintmon.exe (18.56 MB)
• splunk-wmi.exe (18.50 MB)
• splunk.exe (546.82 KB)
• splunkd.exe (62.49 MB)
• supervisor-simulator.exe (1.24 MB)

...click to view all...

The current page applies to UniversalForwarder version 9.3.2.0 alone. Click on the links below for other UniversalForwarder versions:

• 6.3.8.0
• 9.0.3.1
• 8.1.5.0
• 6.3.2.0
• 8.1.8.0
• 8.2.6.0
• 7.0.2.0
• 7.2.6.0
• 6.6.7.0
• 9.0.2.0
• 8.2.10.0
• 7.0.3.0
• 9.4.1.0
• 8.2.5.0
• 8.2.4.0
• 8.0.1.0
• 6.3.3.4
• 8.0.3.0
• 6.5.1.0
• 8.0.2.0
• 6.2.1.245427
• 6.2.3.264376
• 9.3.0.0
• 7.3.7.0
• 7.2.9.1
• 8.1.0.1
• 7.1.0.0
• 6.2.0.237341
• 7.2.5.1
• 7.2.4.0
• 8.2.6.1
• 9.4.0.0
• 9.2.0.1
• 6.4.0.0
• 6.0.3.204106
• 6.6.0.0
• 7.0.1.0
• 8.2.12.0
• 8.1.2.0
• 6.5.2.0
• 8.1.3.0
• 7.1.6.0
• 9.1.3.0
• 7.3.0.0
• 7.3.4.0
• 6.5.3.0
• 7.1.1.0
• 8.0.5.0
• 7.2.10.1
• 7.0.0.0
• 9.0.0.1
• 7.3.5.0
• 9.0.4.0
• 7.2.4.2
• 7.1.4.0
• 7.3.3.0
• 9.0.7.0
• 6.6.5.0
• 8.2.0.0
• 8.2.8.0
• 8.2.1.0
• 8.2.7.1
• 9.1.1.0
• 7.0.4.0
• 8.2.7.0
• 9.2.2.0
• 9.0.9.0
• 6.3.3.0
• 7.3.6.0
• 7.2.7.0
• 9.1.2.0
• 9.2.1.0
• 6.6.3.0
• 8.0.6.0
• 6.2.4.271043
• 6.4.1.0
• 9.1.4.0
• 7.3.2.0
• 7.3.9.0
• 6.3.5.0
• 9.0.0.0
• 9.2.0.0
• 7.3.8.0
• 8.2.11.0
• 7.1.3.0
• 6.4.2.0
• 9.0.5.0
• 7.1.2.0
• 7.2.0.0
• 8.2.2.1
• 7.2.5.0
• 7.3.1.1
• 8.2.3.0
• 8.2.2.0
• 7.2.1.0
• 6.6.6.0
• 6.1.3.220630
• 6.4.8.0
• 9.1.0.1
• 9.3.1.0

...click to view all...
Some files and registry entries are frequently left behind when you uninstall UniversalForwarder.

Folders left behind when you uninstall UniversalForwarder:

• C:\Program Files\SplunkUniversalForwarder

Files remaining:

• C:\Program Files\SplunkUniversalForwarder\bin\_asyncio.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_bz2.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_ctypes.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_ctypes_test.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_decimal.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_elementpath.cp39-win_amd64.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_elementtree.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_hashlib.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_msi.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_multiprocessing.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_overlapped.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_queue.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_socket.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_sqlite3.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_ssl.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_testbuffer.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_testcapi.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_testconsole.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_testimportmultiple.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_testinternalcapi.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_testmultiphase.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_uuid.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_win32sysloader.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_winxptheme.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\_zoneinfo.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-console-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-datetime-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-debug-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-errorhandling-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l1-2-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l2-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-handle-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-heap-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-interlocked-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-libraryloader-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-localization-l1-2-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-memory-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-namedpipe-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processenvironment-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processthreads-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processthreads-l1-1-1.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-profile-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-string-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-synch-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-synch-l1-2-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-sysinfo-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-timezone-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-util-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-conio-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-convert-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-environment-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-filesystem-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-heap-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-locale-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-math-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-multibyte-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-private-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-process-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-runtime-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-stdio-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-string-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-time-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-utility-l1-1-0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\archive.dll
• C:\Program Files\SplunkUniversalForwarder\bin\bson-1.0.dll
• C:\Program Files\SplunkUniversalForwarder\bin\btool.exe
• C:\Program Files\SplunkUniversalForwarder\bin\btprobe.exe
• C:\Program Files\SplunkUniversalForwarder\bin\builder.cp39-win_amd64.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\classify.exe
• C:\Program Files\SplunkUniversalForwarder\bin\clean.cp39-win_amd64.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\compsup.exe
• C:\Program Files\SplunkUniversalForwarder\bin\copyright.txt
• C:\Program Files\SplunkUniversalForwarder\bin\diff.cp39-win_amd64.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\etree.cp39-win_amd64.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\genRootCA.bat
• C:\Program Files\SplunkUniversalForwarder\bin\libeay32.dll
• C:\Program Files\SplunkUniversalForwarder\bin\libexslt.dll
• C:\Program Files\SplunkUniversalForwarder\bin\libsasl.dll
• C:\Program Files\SplunkUniversalForwarder\bin\libxml2.dll
• C:\Program Files\SplunkUniversalForwarder\bin\libxmlsec.dll
• C:\Program Files\SplunkUniversalForwarder\bin\libxmlsec-openssl.dll
• C:\Program Files\SplunkUniversalForwarder\bin\libxslt.dll
• C:\Program Files\SplunkUniversalForwarder\bin\mmapfile.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\msvcp140.dll
• C:\Program Files\SplunkUniversalForwarder\bin\netsnmp.dll
• C:\Program Files\SplunkUniversalForwarder\bin\objectify.cp39-win_amd64.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\odbc.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\openssl.exe
• C:\Program Files\SplunkUniversalForwarder\bin\pcre2-config
• C:\Program Files\SplunkUniversalForwarder\bin\perfmon.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\pyexpat.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\PyWinTypes37.dll
• C:\Program Files\SplunkUniversalForwarder\bin\PyWinTypes39.dll
• C:\Program Files\SplunkUniversalForwarder\bin\sax.cp39-win_amd64.p39d
• C:\Program Files\SplunkUniversalForwarder\bin\scripts\readme.txt
• C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-admon.path
• C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-MonitorNoHandle.path
• C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-netmon.path

You will find in the Windows Registry that the following data will not be removed; remove them one by one using regedit.exe:

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\4BFCAD278EDE9754C913DD874BDD16BD
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{72DACFB4-EDE8-4579-9C31-DD78B4DD61DB}

Additional registry values that are not cleaned:

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\4BFCAD278EDE9754C913DD874BDD16BD\ProductName
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SplunkUniversalForwarder\
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Windows\Installer\{72DACFB4-EDE8-4579-9C31-DD78B4DD61DB}\
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SplunkForwarder\ImagePath

How to delete UniversalForwarder from your PC with Advanced Uninstaller PRO

UniversalForwarder is a program released by the software company Splunk, Inc.. Some users try to erase it. Sometimes this is hard because uninstalling this manually takes some experience related to Windows program uninstallation. One of the best EASY approach to erase UniversalForwarder is to use Advanced Uninstaller PRO. Here are some detailed instructions about how to do this:





1. If you don't have Advanced Uninstaller PRO already installed on your system, add it. This is a good step because Advanced Uninstaller PRO is a very useful uninstaller and all around tool to maximize the performance of your PC.

DOWNLOAD NOW

• go to Download Link
• download the setup by clicking on the green DOWNLOAD button
• install Advanced Uninstaller PRO

2. Run Advanced Uninstaller PRO. It's recommended to take your time to admire the program's design and wealth of features available. Advanced Uninstaller PRO is a very good program.

3. Press the General Tools category


4. Activate the Uninstall Programs button


5. A list of the applications existing on the PC will appear

6. Scroll the list of applications until you locate UniversalForwarder or simply activate the Search feature and type in "UniversalForwarder". If it is installed on your PC the UniversalForwarder program will be found very quickly. Notice that after you click UniversalForwarder in the list , the following data about the program is made available to you:

• Star rating (in the left lower corner). The star rating explains the opinion other people have about UniversalForwarder, from "Highly recommended" to "Very dangerous".
• Opinions by other people - Press the Read reviews button.
• Details about the application you want to remove, by clicking on the Properties button.

7. Press the Uninstall button. A confirmation page will appear. Confirm the uninstall by pressing Uninstall. Advanced Uninstaller PRO will uninstall UniversalForwarder.


8. After removing UniversalForwarder, Advanced Uninstaller PRO will ask you to run a cleanup. Click Next to start the cleanup. All the items of UniversalForwarder which have been left behind will be detected and you will be asked if you want to delete them. By uninstalling UniversalForwarder using Advanced Uninstaller PRO, you are assured that no registry entries, files or folders are left behind on your computer.

Your computer will remain clean, speedy and ready to take on new tasks.

Disclaimer

This page is not a piece of advice to remove UniversalForwarder by Splunk, Inc. from your computer, we are not saying that UniversalForwarder by Splunk, Inc. is not a good application. This page simply contains detailed info on how to remove UniversalForwarder in case you want to. The information above contains registry and disk entries that Advanced Uninstaller PRO discovered and classified as "leftovers" on other users' PCs.