Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 29 replies
  • Subscribers 1 subscriber
  • Views 93187 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Scripted Uninstall of Sophos

packman73

Looking for a scripted uninstall of Sophos.  We have over 2000 endpoints at 420+ remote locations which are mainly POS systems running XP or Windows 7.  We can't take control of these systems to manually uninstall Sophos if problems arise (and they have).  I've talked to Sophos support about this and they don't have an uninstall script for Sophos 10.0 from what I've been told.  

I've found all the MSIEXEC uninstall strings within the registry but running those remotely via PsExec does not work, not sure why.

I find it interesting that as good as Sophos is of uninstalling ever other major AV/EPP product on the market to install their product on an end-point, they offer no means (other than touch each endpoint manually) to uninstall their own product.

If anyone has any information that would help us, that would be greatly appreciated.

Regards,

Art

:22069


This thread was automatically locked due to age.
Parents
  • 0

    CustomActions log:

    2012-07-27 09:15:48 RemoveSAVI: Action started
    2012-07-27 09:15:50 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
    2012-07-27 09:15:50 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
    2012-07-27 09:15:50 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
    2012-07-27 09:15:50 RemoveSAVI: UpdateRequest signalled
    2012-07-27 09:15:50 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
    2012-07-27 09:15:50 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
    2012-07-27 09:15:50 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
    2012-07-27 09:15:50 RemoveSAVI: Action succeeded
    2012-07-27 09:16:00 DeleteUserGroups: Action started
    2012-07-27 09:16:00 DeleteUserGroups: We are not a domain controller: Attempting to delete local user groups
    2012-07-27 09:16:00 DeleteUserGroups: Action succeeded
    2012-07-27 09:16:35 RollbackUpdateSavAdapterDll: Action started
    2012-07-27 09:16:35 RollbackUpdateSavAdapterDll: Action succeeded
    2012-07-27 09:16:35 DeleteOtherFiles: Action started
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf00 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf01 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf02 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf03 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
    2012-07-27 09:16:35 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-07-27 09:16:35 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
    2012-07-27 09:16:35 DeleteOtherFiles: Deleting config file folder
    2012-07-27 09:16:35 DeleteOtherFiles: Failed to delete config folder, 2
    2012-07-27 09:16:35 DeleteOtherFiles: Action succeeded
    2012-07-27 09:16:35 ForceDeleteFiles: Action started
    2012-07-27 09:16:35 ForceDeleteFiles: Error deleting DesktopMessaging registry key. Returned error was: Het systeem kan het opgegeven bestand niet vinden.

    2012-07-27 09:16:35 ForceDeleteFiles: Action succeeded
    2012-07-27 09:16:36 RunErrorScripts: Action started
    2012-07-27 09:16:36 RunErrorScripts: Action succeeded
    2012-07-27 09:16:36 RestoreMovedFiles: Action started
    2012-07-27 09:16:36 RestoreMovedFiles: Action succeeded
    2012-07-27 09:16:36 SetUpdateFailed: Action started
    2012-07-27 09:16:36 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update
    2012-07-27 09:16:36 SetUpdateFailed: Action succeeded

    :27465
Reply
  • 0

    CustomActions log:

    2012-07-27 09:15:48 RemoveSAVI: Action started
    2012-07-27 09:15:50 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
    2012-07-27 09:15:50 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
    2012-07-27 09:15:50 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
    2012-07-27 09:15:50 RemoveSAVI: UpdateRequest signalled
    2012-07-27 09:15:50 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
    2012-07-27 09:15:50 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
    2012-07-27 09:15:50 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
    2012-07-27 09:15:50 RemoveSAVI: Action succeeded
    2012-07-27 09:16:00 DeleteUserGroups: Action started
    2012-07-27 09:16:00 DeleteUserGroups: We are not a domain controller: Attempting to delete local user groups
    2012-07-27 09:16:00 DeleteUserGroups: Action succeeded
    2012-07-27 09:16:35 RollbackUpdateSavAdapterDll: Action started
    2012-07-27 09:16:35 RollbackUpdateSavAdapterDll: Action succeeded
    2012-07-27 09:16:35 DeleteOtherFiles: Action started
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf00 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf01 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf02 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 Error deleting file: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf03 with error: Toegang geweigerd.
    .
    2012-07-27 09:16:35 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
    2012-07-27 09:16:35 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-07-27 09:16:35 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
    2012-07-27 09:16:35 DeleteOtherFiles: Deleting config file folder
    2012-07-27 09:16:35 DeleteOtherFiles: Failed to delete config folder, 2
    2012-07-27 09:16:35 DeleteOtherFiles: Action succeeded
    2012-07-27 09:16:35 ForceDeleteFiles: Action started
    2012-07-27 09:16:35 ForceDeleteFiles: Error deleting DesktopMessaging registry key. Returned error was: Het systeem kan het opgegeven bestand niet vinden.

    2012-07-27 09:16:35 ForceDeleteFiles: Action succeeded
    2012-07-27 09:16:36 RunErrorScripts: Action started
    2012-07-27 09:16:36 RunErrorScripts: Action succeeded
    2012-07-27 09:16:36 RestoreMovedFiles: Action started
    2012-07-27 09:16:36 RestoreMovedFiles: Action succeeded
    2012-07-27 09:16:36 SetUpdateFailed: Action started
    2012-07-27 09:16:36 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update
    2012-07-27 09:16:36 SetUpdateFailed: Action succeeded

    :27465
Children
No Data