Kaseya Community

Auto remove other AV clients

  • Here's one we used to remove Trend:

    Script Name: Trend Micro OfficeScan Uninstall
    Script Description: Uninstall Trend Micro OfficeScan client

    IF True
    THEN
    Set Registry Value
    Parameter 1 : HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\Allow Uninstall
    Parameter 2 : 1
    Parameter 3 : REG_DWORD
    OS Type : 0
    Execute File
    Parameter 1 : C:\Program Files\Trend Micro\OfficeScan Client\ntrmv.exe
    Parameter 2 : /silent /noreboot
    Parameter 3 : 0
    OS Type : 0
    ELSE

    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: boudj
  • boudj
    Here's one we used to remove Trend:

    Script Name: Trend Micro OfficeScan Uninstall
    Script Description: Uninstall Trend Micro OfficeScan client

    IF True
    THEN
    Set Registry Value
    Parameter 1 : HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\Allow Uninstall
    Parameter 2 : 1
    Parameter 3 : REG_DWORD
    OS Type : 0
    Execute File
    Parameter 1 : C:\Program Files\Trend Micro\OfficeScan Client\ntrmv.exe
    Parameter 2 : /silent /noreboot
    Parameter 3 : 0
    OS Type : 0
    ELSE


    thanks but even with that one, when calling ntrmv.exe, it errors about the installation path... cant find where in the registry the path is stored... do you by chance have any office scan clients deployed still?

    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: Wilfred
  • yep... what version of OS are you looking for?

    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: boudj
  • boudj
    yep... what version of OS are you looking for?


    these installs are on xp pro sp2, and office scan 8. was wondering if you could check their registry for anything regarding installation path..

    heres trend micros page for removal but i cant find any key with an installation path in it...

    http://esupport.trendmicro.com/Pages/Manually-uninstalling-OfficeScan-80-clients.aspx

    edit: noticed some of them are not UTD on patches, some are sp3...

    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: Wilfred
  • findsymantec.vbs.txt
    Symantec Uninstall Script.

    This will scan for any version of "Symantec AntiVirus"in the registry.
    Dump the GUID to C:\symguid.txt
    Execute the uninstaller based on the GUID.

    Script Name: Uninstall Symantec AV
    Script Description: Uninstall Symantec Antivirus.
    1. Scans registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall for Display name = "Symantec AntiVirus"
    2. Uninstalls based on find.

    IF True
    THEN
    Use Credential
    OS Type : 0
    Delete File - (Continue on Fail)
    Parameter 1 : C:\symguid.txt
    OS Type : 0
    Write File
    Parameter 1 : C:\findsymantec.vbs
    Parameter 2 : VSASharedFiles\SAVRemove\findsymantec.vbs
    OS Type : 0
    Execute Shell Command
    Parameter 1 : C:\findsymantec.vbs
    Parameter 2 : 0
    OS Type : 0
    Get Variable
    Parameter 1 : 1
    Parameter 2 : C:\symguid.txt
    Parameter 3 : SYMGUID
    OS Type : 0
    Set Registry Value
    Parameter 1 : HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security\LockUnloadServices
    Parameter 2 : 0
    Parameter 3 : REG_DWORD
    OS Type : 0
    Set Registry Value
    Parameter 1 : HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security\UseVPUninstallPassword
    Parameter 2 : 0
    Parameter 3 : REG_DWORD
    OS Type : 0
    Execute File
    Parameter 1 : %systemroot%\system32\msiexec.exe
    Parameter 2 : /norestart /q /x#SYMGUID# REMOVE=ALL
    Parameter 3 : 1
    OS Type : 0
    ELSE



    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: timwalls
  • That doesn't do endpoint does it?

    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: fedsolutions
  • tsorensen@group1auto.com
    Got your back boudj here are all my various AV uninstalls including boudj's eTrust ones I incorporate:

    McAfee (Can't remember the version, was the latest as of a year ago..)
    Script Name: McAfee Removal
    Script Description: This will remove any McAfee products on the machine

    IF True
    THEN
    Execute Shell Command
    Parameter 1 : msiexec.exe /x {35C03C04-3F1F-42C2-A989-A757EE691F65} REMOVE=ALL REBOOT=R /q
    Parameter 2 : 0
    OS Type : 0
    Write Script Log Entry
    Parameter 1 : McAfee products removed
    OS Type : 0
    ELSE
    Write Script Log Entry
    Parameter 1 : Failed to uninstall McAfee products
    OS Type : 0


    Sorry for not having any Symantec ones incorporated, haven't gone through it (yet).

    Will see about setting up a sourceforge for all the AV stuff but I won't be able to regularly manage it so we will need multiple "hats"


    Hello, interesting scripts there

    How long would it take to execsute the Mcafee script roughely?

    Thanks in advance

    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: Stephen@mkit.biz
  • fedsolutions
    That doesn't do endpoint does it?


    I would be curious about this too, or if it could be altered to get rid of SEP as well.

    Legacy Forum Name: Kaseya End Point Security,
    Legacy Posted By Username: Coldfirex