Every "McAfee is back!" story I've ever chased down ends the same way: McAfee never actually left. The uninstall you ran removed one of its pieces — and the pop-ups you're still seeing come from the pieces that stayed.
I got a closer look at this than most people while building my debloating tool. My own Dell, which I thought was McAfee-free, turned out to still be carrying a McAfee component years after the antivirus itself was gone. So here is the removal that actually finishes the job — all four pieces, in the right order.
The four pieces of a McAfee install
- The antivirus itself — LiveSafe, Total Protection, or plain "McAfee". This is the only piece most people remove.
- McAfee WebAdvisor — the browser add-on. It's a separate program with its own uninstall entry, and it survives the antivirus removal on purpose. Its "site check" pop-ups are the number-one reason people think McAfee reinstalled itself.
- Drivers and services — filter drivers and background services that the Windows uninstaller leaves running. Invisible in your apps list.
- Registry leftovers — and occasionally a ghost: an "installed programs" entry pointing at an uninstaller that no longer exists, so the machine lists McAfee forever even though it's gone.
One thing before you start: if you pay for McAfee, stop here. An active subscription and an expired preinstalled trial look identical in the apps list. This guide is for the trial that came with your PC and the pieces it leaves behind.
Step 1 — Uninstall both apps, not one
Settings → Apps → Installed apps, search "McAfee". Uninstall the antivirus and McAfee WebAdvisor — check for "WebAdvisor by McAfee" too, same thing under a different name. The antivirus uninstaller will try a few "are you sure" screens and an exit survey; click through them. Restart when it's done.
Don't worry about being unprotected: Windows Security turns itself back on automatically the moment McAfee's antivirus is gone. That's built into Windows — no download, no setup.
Step 2 — Run MCPR, McAfee's own cleanup tool
McAfee knows its uninstaller leaves things behind, which is why they publish a dedicated removal tool: MCPR (McAfee Consumer Product Removal). It hunts down the drivers, services and folders the normal uninstall misses. Get it from McAfee's official support page — nowhere else; there are fake "McAfee removers" out there.
It can't be fully automated — it makes you accept terms and type a captcha-style code — but it's two minutes of clicking. Restart again when it finishes. For most machines, this is where the story ends: no pop-ups, no McAfee in the apps list, Windows Security running.
Step 3 — If McAfee still shows as installed: the ghost
Here's the piece I've never seen another guide mention, because I only learned it from my own machine. After all of the above, my Dell still listed "WebAdvisor by McAfee — 57.8 MB" in installed programs. But when my tool went to run its uninstaller, the file didn't exist. The whole McAfee folder didn't exist. Something — my best guess is a McAfee cleanup run long ago — had removed the program and left its registry entry behind: a ghost. Windows read the registry and reported a program that wasn't there.
You can't uninstall a ghost — there's nothing to run. The entry has to be removed from the registry itself. If you're comfortable in regedit, the entries live under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall (and the WOW6432Node twin) — find the key whose DisplayName is the McAfee product, confirm its UninstallString points at a file that doesn't exist, and delete that key only. If that sentence made you nervous, don't do it by hand — it's exactly the kind of thing that should be automated with checks around it, which is why my upcoming tool detects ghosts and cleans them for you.
And when it genuinely does come back
Two honest cases. Fresh factory resets restore the whole trial — that's the PC image, not sorcery. And some laptop vendors' update apps can re-offer "recommended software" that includes security trials. If a McAfee trial reappears months later, look at what else got installed that day; the vendor updater is usually standing right there whistling. My Dell bloatware guide and the bulk-uninstall walkthrough cover those updaters too.
The ghost-entry story above is from building RBS Debloater — a free tool that removes preinstalled junk properly: both apps, the services, the leftovers, and yes, the ghosts. Restore point first, everything reversible. Final testing now; it'll be free on this site.