Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 30806 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos removal script?

JustinDevereaux

Hi,

I'm rolling out ESC 9.5 on our network, but I've found a few machines on a remote site running 7.6 - I've tried to upgrade them and they fail, and attempting to uninstall Sophos doesn't work. I recall having a Sophos-supplied removal script in the past, does anyone have a link to the most recent version of this so I can completely remove all Sophos-related stuff from these PCs and roll out 9.5 to them?

Cheers

JD

:4729


This thread was automatically locked due to age.
  • 0

    Thanks YouMadBro.

    Further to your script, I have made a remote uninstalltion script which uses psexec:

    " 

    SET /P PCNAME=[PCNAME]
    SET /P PASSWD=[ADMINPASSWD]
     
     
    rem stopping sophos services on %PC%
     
    start /wait sc \\%PCNAME% stop "Sophos Agent"
    start /wait sc \\%PCNAME% stop "SAVService"
    start /wait sc \\%PCNAME% stop "SAVAdminService"
    start /wait sc \\%PCNAME% stop "Sophos AutoUpdate Service"
    start /wait sc \\%PCNAME% stop "Sophos Client Firewall"
    start /wait sc \\%PCNAME% stop "Sophos Client Firewall Manager"
    start /wait sc \\%PCNAME% stop "Sophos Compliance Agent API"
    start /wait sc \\%PCNAME% stop "Sophos Message Router"
    start /wait sc \\%PCNAME% stop "swi_service"
    start /wait sc \\%PCNAME% stop "swi_update"
     
     
     
     
     
     
    rem uninstalling 5 services in order:
    rem sophos client firewall; Sophos AutoUpdate; Sophos Remote Management System; Sophos Compliance Agent; Sophos Anti-Virus
     
     
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{12C00299-B8B4-40D3-9663-66ABEA3198AB} /quiet /norestart /l* c:\log.txt
    rem sleep for 5 secs before continuing
    ping -n 5 127.0.0.1 > nul
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{15C418EB-7675-42be-B2B3-281952DA014D} /quiet /norestart /l* c:\log.txt
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{FED1005D-CBC8-45D5-A288-FFC7BB304121} /quiet /norestart /l* c:\log.txt
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{486feabf-70eb-48c1-9c35-700b74a8ebe6} /quiet /norestart /l* c:\log.txt
    rem sleep for 5 secs before continuing
    ping -n 5 127.0.0.1 > nul 
    psexec \\%PCNAME% -u Administrator -p %PASSWD% cmd /c msiexec.exe /X{9ACB414D-9347-40B6-A453-5EFB2DB59DFA} /quiet /norestart /l* c:\log.txt
     
     
    echo "Done"

    "

    Note: Sophos may complain about group membership and refuse to uninstall, thus we need to stop its services first. Hope that helps others in need to uninstall sophos remotely over the network.

    -Nikolay

    :19793
  • 0

    I'm pretty good at removing viruses, sophos is worse than most viruses.  t least I learned this lesson before purchasing the product for the network.

    Downside is that it's left it's garbage all  over  the server,  and it refuses to uninstall.  And yes I did install with their directions, and I've tried copying files  into folders like the directions. 

    Avoid this software, it's nothing but a disaster if you need to uninstall it for any reason.

    :36605