Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 3 subscribers
  • Views 11331 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MCafee uninstall fails

StefanoColombo

We are having issue while moving from mcafee to sophos endpoint protection

We created a group policy to install sophos but it fails while removing mcafee

 

,Information,Return Code 13 from third-party security software removal tool.,



This thread was automatically locked due to age.
  • 0

    Hello StefanoColombo,

    dunno what 13 signifies, the AVRemove.log should be more verbose.

    Christian

  • 0 in reply to QC

    these are the last few lines in the avremove.log

     

    7 Jun 2017 14:48:05 Debug: Opening key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{501A6723-70DE-87DF-1F83-1FB7B1A7E147}
    07 Jun 2017 14:48:05 Debug: Opening key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{501A6723-70DE-87DF-1F83-1FB7B1A7E147} (64-bit)
    07 Jun 2017 14:48:05 Debug: Key {501A6723-70DE-87DF-1F83-1FB7B1A7E147} not found
    07 Jun 2017 14:48:05 Debug: Opening key SOFTWARE\Microsoft\Windows\CurrentVersion\Installer (64-bit)
    07 Jun 2017 14:48:05 Debug: Opening key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BE5DD172-7F42-7948-1A60-E6A720288F81}
    07 Jun 2017 14:48:05 Debug: Opening key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BE5DD172-7F42-7948-1A60-E6A720288F81} (64-bit)
    07 Jun 2017 14:48:05 Debug: Key {BE5DD172-7F42-7948-1A60-E6A720288F81} not found
    07 Jun 2017 14:48:05 Info: Detection of third-party security and update products complete
    07 Jun 2017 14:48:05 Info: Detected Products:
    07 Jun 2017 14:48:05 Info:   [McAfee VirusScan Enterprise (with ePO agent)] version: 8.8
    07 Jun 2017 14:48:05 Info: AVRemove finished. 1 products found. Report logged to : C:\Windows\TEMP\avremove.log
    Sophos Anti-Virus software detector - Version 2.12.0.26
    Copyright (C) 2003-2017 Sophos Limited. All rights reserved.
    Running OS: Microsoft Windows 7 Service Pack 1 [Version 6.01.7601]
    Detection of third-party security and update products complete
    AVRemove finished. 1 products found. Report logged to : C:\Windows\TEMP\avremove.log

  • 0 in reply to StefanoColombo

    Hello StefanoColombo,

    looks like it thinks it has only to detect them - could you also show the first lines please?

    Christian

  • 0 in reply to QC

    There's another file where it says , in Italian , that it failed to remove it

    the file is

    Sophos ES setup.log

    and the lines are

    07/06/2017,14:47:46,Informazioni,Process security set successfully,
    07/06/2017,14:47:59,Informazioni,Corrispondenza tra il contenuto della CID C e il manifest file verificata,
    07/06/2017,14:48:01,Informazioni,Ricerca del software di sicurezza prodotto da terzi.,
    07/06/2017,14:48:05,Informazioni,Codice di ritorno 13 dal tool di rimozione del software di sicurezza prodotto da terzi.,
    07/06/2017,14:48:05,ERRORE,Installazione di Sophos annullata. Disinstallazione del software di sicurezza esistente prodotto da terzi non riuscita,

    The last sentence mean that the setup could not remove the third-party security software

  • 0 in reply to StefanoColombo

    Hello StefanoColombo,

    the last sentence means that the setup could not remove
    yes and no. I assume that you get this message whenever AVRemove.exe returns an exit code other than success. No success is also returned when a product is found that could otherwise be removed but --detectOnly was requested or in effect for some other reason. To me the summary in the log looked like this was the case - that's why I asked for the first section of the log that lists the settings in effect.

    Christian

  • 0 in reply to QC

    Hello Christian

    actually you're right , I found at the beginning of the file that is in detect only mode , I'm going to try

    -crt R

    in the batch file

    thanks

Unfiltered HTML