En-mass uninstall.

[Gatt]

its the Application GUID which will be identical on all PC's
You'll need the GUID for every application you want to un-install...

[boomam]

Where in the registry is that?
HKLM?

[Gatt]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall

This brings up a list of GUID's - each one representing a different program
Eg {96C267DA-0926-4C11-B4E7-4D3EF85130D0} is the GUID for Paint.Net
You need the string called UninstallString..

[boomam]

Found them.

Theres a MSIEXEC one for the VirusScanner
and a csscan /uninstallmas one for the spyware.

Should be alright putting them both in a batch file shouldnt i?

[boomam]

Phew, what an afternoon, knackered!. Anyway:

Heres what i have:

Virus Scanner Enterprise:
MsiExec.exe /I{5DF3D1BB-894E-4DCD-8275-159AC9829B43}

Anti-Spyware Enterprise:
c:\program files\network associates\virusscan\csscan /UninstallMAS


I need the latter to un-install first, so i take that the batch file would read:

c:\program files\network associates\virusscan\csscan /UninstallMAS

c:\windows\system32\MsiExec.exe /I{5DF3D1BB-894E-4DCD-8275-159AC9829B43} /quiet /norestart

[boomam]

Bump! .

[ZeroHour]

BTW sophos also have a tool to run that will wipe av off your pc.
Give that a try if your having problems.

[boomam]

This is annoying me now.

I have three GPOs setup.
One to remove McAfee.
One to install NOD32 + settings.
One to remove NOD32 start menu shortcuts.

Ive got them set to a testing OU with my test computer, with McAfee installed on it, yet none of them seems to work? Although RSOP reports them as being detected.

Ideas?

[tosh74]

Have you ran

gpupdate /force

on your test machine ?

Sorry for not replying earlier

Have you checked the event logs on your test machine for clues as to why each GPO is not being processed as expected ?

[boomam]

Yes.
On every boot.


Bizzarly, i tryed running the McAfee removal batch file manually and it just errors saying no such thing? .
So maybe thats why NOD isnt installing?

[boomam]

BTW sophos also have a tool to run that will wipe av off your pc.
Give that a try if your having problems.

Do you have a link? As ive looked on the Sophos website and cant find anything?

Thanks. .

[tosh74]

c:\program files\network associates\virusscan\csscan /UninstallMAS

c:\windows\system32\MsiExec.exe /I{5DF3D1BB-894E-4DCD-8275-159AC9829B43} /quiet /norestart



The batch file is failing because line 1 needs to be in quotes (the path has spaces in it)

Change line 1 so that it now reads
"c:\program files\network associates\virusscan\csscan.exe" /UninstallMAS

Try running line 2 from Start/Run to check that it does remove Mcafee

[boomam]

Ive modified the batch file as you said and its odd, because nothing appears to happen.
The first bit errors (because my test system doesnt have the anti-spyware on), and the second bit skips a few lines, then goes back to the command prompt.
If i check task manager, msiexec is running, but McAfee is still open?

If i restart, McAfee remains on the system? .

[tosh74]

try
c:\windows\system32\MsiExec.exe /X{5DF3D1BB-894E-4DCD-8275-159AC9829B43} /quiet /norestart

Instead (change /I for /X)

Looks to me that /I will run a wizard that will ask you modify/remove or repair the current install and because we are using the /quiet switch it's just not showing these options. the /X switch (in combination with the quiet switch) should remove the app without any user interaction. My apologies for the confusion

[boomam]

Odd.
It still doesnt work.

Is the string different on each machine?