SOPHOS endpoint doesn't show me like the other solutions to unistall an existing antivirus ( kaspersky for example ) . is it normal ?
This thread was automatically locked due to age.
SOPHOS endpoint doesn't show me like the other solutions to unistall an existing antivirus ( kaspersky for example ) . is it normal ?
Sophos has the CRT - Competitor Removal Tool, which runs when SAV installs and that logs to avremove.log. This is in the temp directory of the installing user, i.e. %temp%.
It depends what version of Kaspersky is installed if it can be removed.
If you want to test it. You can copy the crt folder from: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
The help shows:
AVRemove.exe --help
Sophos Anti-Virus software detector - Version 2.19.0.142
Copyright (C) 2003-2021 Sophos Limited. All rights reserved.
Usage: AVRemove.exe [options]
Options:
--version show program's version number and exit
-h, --help show this help message and exit
-d, --detectOnly Only detect products
-f, --firewalls Include firewalls and product suites in removal
-l, --listproducts Display the list of competitive products we know to
check for.
-t, --trace Turns on trace logging.
So you could run:
AVRemove.exe -t -d
To log all the keys it checks as logged to %temp%\avermove.log
In \crt\data.zip is ProductCatalog.xml which contains all the keys checked for.