Need help to uninstall anti-virus

(imported topic written by YONG91)

hi, my company is currently using the Symantec Endpoint Protection version 11.0.x.xxx.

the Windows OS which all of us now using is XP with service pack 2. as im currently patching 2000-odd computers to service pack 3. ive been hit with this error: “handle is invalid” while installing SP3.

later on, ive found out that is actually the anti-virus which is blocking the process. but im not going to uninstall computer-by-computer which will take forever.

i was wondering if BigFix able to push through the uninstallation. this uninstallation requires a password to go through.

any action script to uninstall? appreciate help (if any) as ive a deadline to complete all computers to be patch up with SP3.

Bernard.

(imported comment written by BenKus)

Hi Bernard,

I believe that there are Symantec Uninstall Fixlets provided as part of the Trend Micro CPM Fixlet site.

Ben

(imported comment written by SystemAdmin)

I used the following for mine but I’m pretty sure ours wasn’t password protected.

waithidden “{pathname of system folder}\msiexec.exe” /qn REBOOT=ReallySuppress /x {"%7b2EFCC193-D915-4CCB-9201-31773A27BC06%7d"}

(imported comment written by YONG91)

Ben Kus

Hi Bernard,

I believe that there are Symantec Uninstall Fixlets provided as part of the Trend Micro CPM Fixlet site.

Ben

where is the site?? within here?

(imported comment written by YONG91)

ShanePlumb

I used the following for mine but I’m pretty sure ours wasn’t password protected.

waithidden “{pathname of system folder}\msiexec.exe” /qn REBOOT=ReallySuppress /x {"%7b2EFCC193-D915-4CCB-9201-31773A27BC06%7d"}

just use the above command will do? any name that i need to input?? example like… pathname? display name?

thanks.

(imported comment written by SystemAdmin)

Just paste that line into an action as the action script. You don’t need to define anything in that action script. Be warned as well that this will only uninstall a specific version of Symantec. To make sure you have the right version you need to go to the Installed Applications Information (Windows) of a PC’s record and find the Symantec entry. It will have the code in curly brackets. Replace that number into the number I provided but don’t remove the %7b or %7d at either end as these translate to be curly brackets.

And the Trend Micro CPM Fixlet site is a BigFix module. So it depends if you have paid for that module or not.

(imported comment written by YONG91)

ShanePlumb

Just paste that line into an action as the action script. You don’t need to define anything in that action script. Be warned as well that this will only uninstall a specific version of Symantec. To make sure you have the right version you need to go to the Installed Applications Information (Windows) of a PC’s record and find the Symantec entry. It will have the code in curly brackets. Replace that number into the number I provided but don’t remove the %7b or %7d at either end as these translate to be curly brackets.

And the Trend Micro CPM Fixlet site is a BigFix module. So it depends if you have paid for that module or not.

where to locate the Installed Applications Information?

in regedit?

(imported comment written by SystemAdmin)

It’s in the Computer records of BigFix. So go into the Computers area in the left of your console. Click on a PC that you know has Symantec and browse to the Installed Application Information area.

(imported comment written by YONG91)

ShanePlumb

It’s in the Computer records of BigFix. So go into the Computers area in the left of your console. Click on a PC that you know has Symantec and browse to the Installed Application Information area.

it would be better if you have a screen-shot for me to refer to. thank you.

i can show you where and how i did for my case (see attached picture).

i input my script as:

waithidden “{pathname of system folder}\msiexec.exe” /qn REBOOT=ReallySuppress /x {"%7bFA272494-8

DEA-43CF-9BFF-652553C04265%7d"}

the value between %7b and %7d is the uninstall string found in my PC registry editor. wondering if im doing wrongly.

i attached the picture for a better idea. please help.

thanks million.

Hi,

Can anyone help with the uninstallation script for password protected SEP clients.

Regards,
Radhika