UniversalForwarder
A way to uninstall UniversalForwarder from your system
This page is about UniversalForwarder for Windows. Here you can find details on how to uninstall it from your computer. It was created for Windows by Splunk, Inc.. Check out here where you can get more info on Splunk, Inc.. The program is frequently placed in the C:\Program Files\SplunkUniversalForwarder directory. Keep in mind that this location can differ being determined by the user's decision. The full command line for uninstalling UniversalForwarder is MsiExec.exe /X{2E9E1E76-609F-4917-870C-8A6A2BA07451}. Keep in mind that if you will type this command in Start / Run Note you may be prompted for admin rights. btool.exe is the UniversalForwarder's primary executable file and it occupies circa 73.80 KB (75568 bytes) on disk.The executables below are part of UniversalForwarder. They occupy an average of 160.66 MB (168461152 bytes) on disk.
- btool.exe (73.80 KB)
- btprobe.exe (73.80 KB)
- classify.exe (73.80 KB)
- openssl.exe (501.80 KB)
- splunk-admon.exe (12.42 MB)
- splunk-compresstool.exe (75.80 KB)
- splunk-MonitorNoHandle.exe (12.36 MB)
- splunk-netmon.exe (12.46 MB)
- splunk-perfmon.exe (12.45 MB)
- splunk-powershell.exe (12.45 MB)
- splunk-regmon.exe (12.50 MB)
- splunk-winevtlog.exe (12.58 MB)
- splunk-winhostinfo.exe (12.37 MB)
- splunk-winprintmon.exe (12.41 MB)
- splunk-wmi.exe (12.36 MB)
- splunk.exe (472.30 KB)
- splunkd.exe (34.89 MB)
- srm.exe (178.80 KB)
The information on this page is only about version 7.1.3.0 of UniversalForwarder. Click on the links below for other UniversalForwarder versions:
- 6.3.8.0
- 9.0.3.1
- 8.1.5.0
- 6.3.2.0
- 8.1.8.0
- 8.2.6.0
- 7.0.2.0
- 7.2.6.0
- 6.6.7.0
- 9.0.2.0
- 8.2.10.0
- 7.0.3.0
- 8.2.5.0
- 8.2.4.0
- 8.0.1.0
- 6.3.3.4
- 8.0.3.0
- 6.5.1.0
- 8.0.2.0
- 6.2.1.245427
- 6.2.3.264376
- 7.3.7.0
- 7.2.9.1
- 8.1.0.1
- 7.1.0.0
- 6.2.0.237341
- 7.2.5.1
- 7.2.4.0
- 8.2.6.1
- 9.2.0.1
- 6.4.0.0
- 6.0.3.204106
- 6.6.0.0
- 7.0.1.0
- 8.2.12.0
- 8.1.2.0
- 6.5.2.0
- 8.1.3.0
- 7.1.6.0
- 9.1.3.0
- 7.3.0.0
- 7.3.4.0
- 6.5.3.0
- 7.1.1.0
- 8.0.5.0
- 7.2.10.1
- 7.0.0.0
- 9.0.0.1
- 7.3.5.0
- 9.0.4.0
- 7.2.4.2
- 7.1.4.0
- 7.3.3.0
- 6.6.5.0
- 8.2.0.0
- 8.2.8.0
- 8.2.1.0
- 8.2.7.1
- 9.1.1.0
- 7.0.4.0
- 8.2.7.0
- 6.3.3.0
- 7.3.6.0
- 7.2.7.0
- 9.1.2.0
- 6.6.3.0
- 8.0.6.0
- 6.2.4.271043
- 6.4.1.0
- 7.3.2.0
- 7.3.9.0
- 6.3.5.0
- 9.0.0.0
- 9.2.0.0
- 7.3.8.0
- 8.2.11.0
- 6.4.2.0
- 9.0.5.0
- 7.1.2.0
- 7.2.0.0
- 8.2.2.1
- 7.2.5.0
- 7.3.1.1
- 8.2.3.0
- 8.2.2.0
- 7.2.1.0
- 6.6.6.0
- 6.1.3.220630
- 6.4.8.0
- 9.1.0.1
- 7.0.11.0
- 6.4.9.0
- 9.0.1.0
- 6.4.7.0
- 8.0.4.0
- 6.6.2.0
- 6.1.5.239630
- 6.4.11.0
- 7.3.7.1
- 8.0.0.0
When planning to uninstall UniversalForwarder you should check if the following data is left behind on your PC.
You should delete the folders below after you uninstall UniversalForwarder:
- C:\Program Files\SplunkUniversalForwarder
Check for and delete the following files from your disk when you uninstall UniversalForwarder:
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-console-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-datetime-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-debug-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-errorhandling-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l1-2-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-file-l2-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-handle-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-heap-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-interlocked-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-libraryloader-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-localization-l1-2-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-memory-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-namedpipe-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processenvironment-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processthreads-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-processthreads-l1-1-1.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-profile-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-string-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-synch-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-synch-l1-2-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-sysinfo-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-timezone-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-core-util-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-conio-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-convert-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-environment-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-filesystem-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-heap-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-locale-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-math-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-multibyte-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-private-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-process-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-runtime-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-stdio-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-string-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-time-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\api-ms-win-crt-utility-l1-1-0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\archive.dll
- C:\Program Files\SplunkUniversalForwarder\bin\btool.exe
- C:\Program Files\SplunkUniversalForwarder\bin\btprobe.exe
- C:\Program Files\SplunkUniversalForwarder\bin\classify.exe
- C:\Program Files\SplunkUniversalForwarder\bin\copyright.txt
- C:\Program Files\SplunkUniversalForwarder\bin\genRootCA.bat
- C:\Program Files\SplunkUniversalForwarder\bin\libbson-1.0.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libeay32.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libexslt.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxml2.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxmlsec.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxmlsec-openssl.dll
- C:\Program Files\SplunkUniversalForwarder\bin\libxslt.dll
- C:\Program Files\SplunkUniversalForwarder\bin\msvcp140.dll
- C:\Program Files\SplunkUniversalForwarder\bin\openssl.exe
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\readme.txt
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-admon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-MonitorNoHandle.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-netmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-perfmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-powershell.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-powershell2.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-regmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winevtlog.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winhostmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winprintmon.path
- C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-wmi.path
- C:\Program Files\SplunkUniversalForwarder\bin\slim.bat
- C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv.cat
- C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv.inf
- C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv.sys
- C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-compresstool.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunkd.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunkdj.bat
- C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.cat
- C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf
- C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.sys
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe
- C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandleDrv.cat
- C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandleDrv.inf
- C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandleDrv.sys
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.ps1
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell-common.ps1
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell-ls.psm1
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-regmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-winhostinfo.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe
- C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe
- C:\Program Files\SplunkUniversalForwarder\bin\srm.exe
- C:\Program Files\SplunkUniversalForwarder\bin\ssleay32.dll
- C:\Program Files\SplunkUniversalForwarder\bin\ucrtbase.dll
- C:\Program Files\SplunkUniversalForwarder\bin\vcruntime140.dll
- C:\Program Files\SplunkUniversalForwarder\copyright.txt
- C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\collector.path
Registry that is not uninstalled:
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\67E1E9E2F906719478C0A8A6B20A4715
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2E9E1E76-609F-4917-870C-8A6A2BA07451}
Registry values that are not removed from your PC:
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\67E1E9E2F906719478C0A8A6B20A4715\ProductName
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SplunkUniversalForwarder\
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\WINDOWS\Installer\{2E9E1E76-609F-4917-870C-8A6A2BA07451}\
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SplunkForwarder\ImagePath
How to erase UniversalForwarder from your computer with the help of Advanced Uninstaller PRO
UniversalForwarder is an application offered by the software company Splunk, Inc.. Frequently, people want to erase this program. This can be hard because removing this manually requires some experience regarding Windows internal functioning. The best QUICK manner to erase UniversalForwarder is to use Advanced Uninstaller PRO. Here is how to do this:1. If you don't have Advanced Uninstaller PRO on your Windows PC, add it. This is a good step because Advanced Uninstaller PRO is the best uninstaller and general tool to clean your Windows system.
DOWNLOAD NOW
- navigate to Download Link
- download the setup by clicking on the green DOWNLOAD button
- install Advanced Uninstaller PRO
3. Press the General Tools button
4. Activate the Uninstall Programs button
5. A list of the applications installed on your computer will be shown to you
6. Scroll the list of applications until you locate UniversalForwarder or simply click the Search field and type in "UniversalForwarder". If it is installed on your PC the UniversalForwarder program will be found very quickly. Notice that when you click UniversalForwarder in the list , the following data about the program is available to you:
- Safety rating (in the left lower corner). This explains the opinion other users have about UniversalForwarder, ranging from "Highly recommended" to "Very dangerous".
- Reviews by other users - Press the Read reviews button.
- Details about the app you want to uninstall, by clicking on the Properties button.
8. After removing UniversalForwarder, Advanced Uninstaller PRO will ask you to run an additional cleanup. Click Next to start the cleanup. All the items of UniversalForwarder that have been left behind will be detected and you will be able to delete them. By uninstalling UniversalForwarder with Advanced Uninstaller PRO, you are assured that no registry items, files or directories are left behind on your computer.
Your computer will remain clean, speedy and ready to run without errors or problems.
Disclaimer
The text above is not a piece of advice to remove UniversalForwarder by Splunk, Inc. from your computer, nor are we saying that UniversalForwarder by Splunk, Inc. is not a good application for your PC. This text simply contains detailed info on how to remove UniversalForwarder in case you want to. Here you can find registry and disk entries that other software left behind and Advanced Uninstaller PRO stumbled upon and classified as "leftovers" on other users' PCs.
2019-03-19 / Written by Dan Armano for Advanced Uninstaller PRO
follow @danarmLast update on: 2019-03-19 20:30:13.547