Sophos Silent Uninstall ?

[mikkydoos]

Hi,

 

I'm changing our AV from Sophos (yuck!) to ESET. Obviously got loads of clients to uninstall.

 

Seen a few scripts on the 'net that I'm not too sure about trusting. Anyone know the 'official' Sophos uninstall script/app/method ?

 

OR

 

Whats worked for you? No way this is gonna be a manual job.

 

Cheers in advance ; )

[JJonas]

we used SEPprep to remove Sophos as we were moving to Symantec but it should work fine for your purposes.

 

http://www.symantec.com/business/support/index?page=content&id=tech148513

[box_l]

ESET will provide you with a "rip and replace" script.

Give them a call, they are very helpful.

 

BoX

[mikkydoos]

Cool. Didn't think they would want to touch it with a barge pole. I'll give 'em a shout. Cheers

[marsdenprimary]

I made a batch file that I found here and it removes it in 10 seconds. In theory if you add it as a startup file you'll be sorted. Only needs running once. Only for 9.5 / 10 though I think.

[mikkydoos]

OK. This is doing it for me fine, run as a batch script....

 

 

-----------------------------------------------------------

@echo off

 

net stop "Sophos AutoUpdate Service"

 

MsiExec.exe /X{FED1005D-CBC8-45D5-A288-FFC7BB304121} /qn REBOOT=SUPPRESS

 

 

MsiExec.exe /X{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} /qn REBOOT=SUPPRESS

 

 

MsiExec.exe /X{D924231F-D02D-4E0B-B511-CC4A0E3ED547} /qn REBOOT=SUPPRESS

-----------------------------------------------------------

 

Search through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

 

On a 64-bit computer you will need to check both the key above and the following key:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall

 

 

 

 

How to uninstall Sophos Endpoint Security and Control from the command line or with a batch file

[box_l]

@echo off
:: Sophos
::	********** Check NOD32 installation **********
:: This will check the registry if the Eset key exists
::

rem net localgroup SophosAdministrator "domain\domain users" /add

net stop "Sophos AutoUpdate Service"
net stop "Sophos Agent"
net stop "SAVService"
net stop "SAVAdminService"
net stop "Sophos Message Router"
net stop "Sophos Web Control Service"
net stop "swi_service"
net stop "swi_update"

:: Removing Sophos Remote Management System
MsiExec /X {FED1005D-CBC8-45D5-A288-FFC7BB304121} /Q reboot="ReallySuppress"
Msiexec /x {FF11005D-CBC8-45D5-A288-25C7BB304121} /q REBOOT="ReallySuppress"

:: v9.5+
:: Removing Sophos Anti-Virus
msiexec /X {9ACB414D-9347-40B6-A453-5EFB2DB59DFA} /q REBOOT="ReallySuppress"
MsiExec /X {034759DA-E21A-4795-BFB3-C66D17FAD183} /q REBOOT="ReallySuppress"

:: Sophos AutoUpdater
Msiexec /x {15C418EB-7675-42be-B2B3-281952DA014D} /q REBOOT="ReallySuppress"

:: Removing Sophos Update Manager
MsiExec /X {2C7A82DB-69BC-4198-AC26-BB862F1BE4D0} /Q reboot="ReallySuppress"

:: Client Firewall
MSIEXEC /X {17071117-5BB2-4737-B05B-C5FABD367313} /Q reboot="ReallySuppress"
MsiExec /X {12C00299-B8B4-40D3-9663-66ABEA3198AB} /Q reboot="ReallySuppress"
::
MSIEXEC /X {C12953C2-4F15-4A6C-91BC-511B96AE2775} /Q reboot="ReallySuppress"
MSIEXEC /X {09C6BF52-6DBA-4A97-9939-B6C24E4738BF} /Q reboot="ReallySuppress"

:: NAC Compliance Agent
MSIEXEC /X {79406B81-26C4-4EAA-8CE2-5637B3279AC2} /Q reboot="ReallySuppress"
MSIEXEC /X {53613148-723B-4EF2-B45E-21F2BE0C0DB3} /Q reboot="ReallySuppress"
MSIEXEC /X {1A7EE8FF-391D-4030-8021-5F560189B87F} /Q reboot="ReallySuppress"
MSIEXEC /X {8bd17d77-227b-4cf6-bc9a-4304f569d8e9} /Q reboot="ReallySuppress"

 

Courtesy of ESET

[mikkydoos]

Cheers @box_I