This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Dumb Question - New to Sophos - Please be gentle :)

I am an IT service provider and I've just picked up a group of laptops from which the client would like Sophos Endpoint Agent removed. I'm brand-new to Sophos. Programs & Features control panel says it's version 11.5.0. I've been able to disable tamper control, but when I try to uninstall it says that an update is in progress. I've left the box running for three days in order to allow the update to finish, but I still end up with the same message on attempted uninstall from Programs & Features. I found article 12360, which seems to give clear instructions, but in step 2 it states that I should be able to right-click on the Sophos icon on the system tray to see update status. Unfortunately I get nothing when attempting to right-click. It acts as if there's no right-click menu.

 

I have found article 109668 and I want to make sure that there's not a more elegant method to accomplish the uninstall before I start playing with .bat files and the Registry. I'd also like to verify that this article is proper for 11.5.0.

 

Thanks!

-Dan

 



This thread was automatically locked due to age.
  • Hi,

    The Sophos AutoUpdate Service (alsvc.exe) kicks off a process to perform the update.  This is either SophosUpdate.exe or Alupdate.exe depending if you're running Central or On-premise endpoint software.  In your case it is SophosUpdate.exe.  You could kill this process if it is still running.  

    Beyond that, in the registry check:

    32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\UpdateStatus
    64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\AutoUpdate\UpdateStatus

    IsUpdating and I think IsInstalling DWORD value of: 1|0 may also be worth deleting if they exist.

    Regards,

    Jak