Thread Info
  • State Verified Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Answers 2 answers
  • Subscribers 16 subscribers
  • Views 55468 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Manual Uninstall?

Paul Hutchings

Is there a guide somewhere on how to do a totally manual uninstall?

As in the client is FUBAR so tamper protection cannot be disabled, and a total rip n replace is needed?

I've seen a few guides but nothing that seems to come down to the level of removing reg keys and folders, it all seems to assume that you can do a clean uninstalled from either add/remove or from the command prompt using msiexec - I want the nuclear option :)



This thread was automatically locked due to age.
Parents
  • +2

    Hello

    Have you started with: https://community.sophos.com/kb/en-us/124377 in order to at least disable SED.  This will have to be done to stand a chance of removing much of Sophos components if it is enabled.

    Then back in a regular boot rather than Safe Mode, I would then run this batch file:

    https://community.sophos.com/kb/en-us/122126

    This will removall all that MSI can.  Maybe check the sub-keys of:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
    For Sophos products, using the UninstallString values.

    At that point, reboot twice.  With LSPs on Windows 7/2008 and lower, loading into processes from a very early point in the boot, 2 reboots may be required to ensure all processes no longer reference some of the DLLs from "C:\ProgramData\Sophos\Web Intelligence\".

    Then you're into manual work if needed:

    SC.exe commands to delete remaining services if there are any, e.g. "sc delete savservice", etc...

    Deleting files/registry keys: 
    "C:\Program Files (x86)\Sophos\"
    "C:\Program Files\Sophos\"
    "C:\Program Files (x86)\Common Files\Sophos\"
    "HKEY_CURRENT_USER\Software\Sophos"
    "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos"
    "HKEY_LOCAL_MACHINE\SOFTWARE\Sophos"

    It may well be then worth re-installing with a view to either leave it if you're re-installing of course or then run the uninstaller which should then remove the rest, i.e. unregister DLLs etc to clean up the registry.

    Regards,

    Jak

  • 0 in reply to jak

    Perfect (and worked) - thank you!

Reply Children
No Data
Unfiltered HTML