Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 30818 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos removal script?

JustinDevereaux

Hi,

I'm rolling out ESC 9.5 on our network, but I've found a few machines on a remote site running 7.6 - I've tried to upgrade them and they fail, and attempting to uninstall Sophos doesn't work. I recall having a Sophos-supplied removal script in the past, does anyone have a link to the most recent version of this so I can completely remove all Sophos-related stuff from these PCs and roll out 9.5 to them?

Cheers

JD

:4729


This thread was automatically locked due to age.
Parents
  • 0

    Thanks YouMadBro.

    Further to your script, I have made a remote uninstalltion script which uses psexec:

    " 

    SET /P PCNAME=[PCNAME]
    SET /P PASSWD=[ADMINPASSWD]
     
     
    rem stopping sophos services on %PC%
     
    start /wait sc \\%PCNAME% stop "Sophos Agent"
    start /wait sc \\%PCNAME% stop "SAVService"
    start /wait sc \\%PCNAME% stop "SAVAdminService"
    start /wait sc \\%PCNAME% stop "Sophos AutoUpdate Service"
    start /wait sc \\%PCNAME% stop "Sophos Client Firewall"
    start /wait sc \\%PCNAME% stop "Sophos Client Firewall Manager"
    start /wait sc \\%PCNAME% stop "Sophos Compliance Agent API"
    start /wait sc \\%PCNAME% stop "Sophos Message Router"
    start /wait sc \\%PCNAME% stop "swi_service"
    start /wait sc \\%PCNAME% stop "swi_update"
     
     
     
     
     
     
    rem uninstalling 5 services in order:
    rem sophos client firewall; Sophos AutoUpdate; Sophos Remote Management System; Sophos Compliance Agent; Sophos Anti-Virus
     
     
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{12C00299-B8B4-40D3-9663-66ABEA3198AB} /quiet /norestart /l* c:\log.txt
    rem sleep for 5 secs before continuing
    ping -n 5 127.0.0.1 > nul
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{15C418EB-7675-42be-B2B3-281952DA014D} /quiet /norestart /l* c:\log.txt
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{FED1005D-CBC8-45D5-A288-FFC7BB304121} /quiet /norestart /l* c:\log.txt
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{486feabf-70eb-48c1-9c35-700b74a8ebe6} /quiet /norestart /l* c:\log.txt
    rem sleep for 5 secs before continuing
    ping -n 5 127.0.0.1 > nul 
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{9ACB414D-9347-40B6-A453-5EFB2DB59DFA} /quiet /norestart /l* c:\log.txt
     
     
    echo "Done"

    "

    Note: Sophos may complain about group membership and refuse to uninstall, thus we need to stop its services first. Hope that helps others in need to uninstall sophos remotely over the network.

    -Nikolay

    :19793
Reply
  • 0

    Thanks YouMadBro.

    Further to your script, I have made a remote uninstalltion script which uses psexec:

    " 

    SET /P PCNAME=[PCNAME]
    SET /P PASSWD=[ADMINPASSWD]
     
     
    rem stopping sophos services on %PC%
     
    start /wait sc \\%PCNAME% stop "Sophos Agent"
    start /wait sc \\%PCNAME% stop "SAVService"
    start /wait sc \\%PCNAME% stop "SAVAdminService"
    start /wait sc \\%PCNAME% stop "Sophos AutoUpdate Service"
    start /wait sc \\%PCNAME% stop "Sophos Client Firewall"
    start /wait sc \\%PCNAME% stop "Sophos Client Firewall Manager"
    start /wait sc \\%PCNAME% stop "Sophos Compliance Agent API"
    start /wait sc \\%PCNAME% stop "Sophos Message Router"
    start /wait sc \\%PCNAME% stop "swi_service"
    start /wait sc \\%PCNAME% stop "swi_update"
     
     
     
     
     
     
    rem uninstalling 5 services in order:
    rem sophos client firewall; Sophos AutoUpdate; Sophos Remote Management System; Sophos Compliance Agent; Sophos Anti-Virus
     
     
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{12C00299-B8B4-40D3-9663-66ABEA3198AB} /quiet /norestart /l* c:\log.txt
    rem sleep for 5 secs before continuing
    ping -n 5 127.0.0.1 > nul
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{15C418EB-7675-42be-B2B3-281952DA014D} /quiet /norestart /l* c:\log.txt
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{FED1005D-CBC8-45D5-A288-FFC7BB304121} /quiet /norestart /l* c:\log.txt
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{486feabf-70eb-48c1-9c35-700b74a8ebe6} /quiet /norestart /l* c:\log.txt
    rem sleep for 5 secs before continuing
    ping -n 5 127.0.0.1 > nul 
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{9ACB414D-9347-40B6-A453-5EFB2DB59DFA} /quiet /norestart /l* c:\log.txt
     
     
    echo "Done"

    "

    Note: Sophos may complain about group membership and refuse to uninstall, thus we need to stop its services first. Hope that helps others in need to uninstall sophos remotely over the network.

    -Nikolay

    :19793
Children
No Data