Manually running AVREMOVE uninstalls NOD32 but Protect Computers Wizard will not

Question

I have manually updated my ProductCatalog.xml with the two following GUIDs:

{640BE6CD-9B4E-4FA4-98BC-E6975A30DC4F} Version="4.2.67.10 Signature 5976 English"

{08B857DF-E6F9-4283-853A-4F329CC09A4F} Version="4.2.40.0 Signature 5976 English"

Removal works fine if I copy the CRT folder to a user's desktop and run AVREMOVE in a CMD prompt window. How does the Protect Computer Wizard work differently that is preventing this from working?

I'm pretty psyched because this is the last thing I need to figure out before I run a deployment.

This thread was automatically locked due to age.

AzRoN · Accepted Answer

hey hey ash!

are you making changes to the crt folder within the Sophos CID? If so, this is the propper way to make changes. You should create a folder under SAVSCFXP called remover (lower case)

In this SAVSCFXP\remover folder you should have the contents of the CRT. WITH the CRT.cfg and ProductCatalog.xml file in the root of the remover folder...

As making modifications to the crt folder will eventually result in those changes being nuked on some major updates. Making a remover folder (of which setup.exe enumerates during bootstrap and looks for avremovew.exe to run) will not be changed on updates.

heyheyash · Answer

Y'know, I think I may have gotten it working. I did have a remover folder and it appeared to be setup properly. It seems as if I needed to overwrite the ProductCatalog file within the data.zip in order for it to have finally worked. I wrote out how I think this process works. Can you tell me if this is how it works or explain how it does work?      -If the remover folder exists then crt is bypassed?      -If ProductCatalog is in the remover dir then the file in the zip is bypassed? Same story with the crt.cfg file? :10887