Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MS Security Eseentials error message from CRT

Hello all,

I am testing the Sophos Cloud agent, and upon installing it to a few machines, it has left them all with an error message during startup. I believe the MS security essentials was uninstalled correctly, but it is still trying to boot upon turning on the machine.

This is going to be a big issue, as we have 200 computers in our network with MS security essentials, and CRT is leaving all comptuers with an error... is there any plans to have this fixed in the near future?



This thread was automatically locked due to age.
Parents
  • Hi Dollie,

    From what I've seen I believe an uninstall of MS Security Essentials doesn't remove its uninstall keys which Sophos CRT detects.

    You can throw this in a batch file to run via GPO start-up to remove the leftover keys on all your machines if MS Security Essentials has already been removed from all of them.  Make sure to test this on an endpoint before rolling it out to the rest of your environment.

    REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Client" /f
    REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{774088D4-0777-4D78-904D-E435B318F5D2}" /f
    REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" /f

Reply
  • Hi Dollie,

    From what I've seen I believe an uninstall of MS Security Essentials doesn't remove its uninstall keys which Sophos CRT detects.

    You can throw this in a batch file to run via GPO start-up to remove the leftover keys on all your machines if MS Security Essentials has already been removed from all of them.  Make sure to test this on an endpoint before rolling it out to the rest of your environment.

    REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Client" /f
    REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{774088D4-0777-4D78-904D-E435B318F5D2}" /f
    REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" /f

Children
No Data