Silent uninstall of Symantec End Point Agent without supplying a password

Arnab's picture
Hello,
 
I have a policy set which requires a password to uninstall the Symantec End Point Protection Agent. I like to uninstall the Symantec End Point Protection client using a script. If I use msiexec /x {76B2BC31-2D96-4170-9C44-09E13B5555F3} /qb it will not uninstall as I am not supplying the password anywhere in the script during the uninstall.
 
What needs to be done in the script or the registry to do an uninstall without supplying a password. 
 
Thanks
Abhishek Pradhan's picture

Hi Arnab,

Please check your PM. Have sent you the steps.

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

dislins's picture

could I also have the

could I also have the uninstall (command line) code please (with and without password bypass)
thanks
John

JasonBel's picture

Remove silently password protected

Hi Abhishek Pradhan

Please send me also the instructions to remove SEP when it is password protected.

Thanks in Advance

Jason

rilprojmgmt's picture

Can you please send it to my

Can you please send it to my PM too?
Thanks!

Abhishek Pradhan's picture

Hello Brent,

I've PM'd you as well....check out your PM Inbox  :smileyvery-happy:

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Aaed Alqarta's picture

Hi ,

Can you please write the steps fo us ? ... I think knowledge sharing should be open for everyone :smileywink:

Symantec Certified Specialist
Experts-Exchange Certified Master (Antivirus / Symantec Antivirus / Enterprise Antivirus / Server Antivirus)
http://extremesecurity.blogspot.com

Sandeep Cheema's picture

Ayed,
 
You are right, but then the information on how to take out the password for uninstall would be really disastrous, People who write the destructive code know how to use the search engines to the peak.
 
 
 
ptheisinger's picture

Hello,
 
is it possible do get the hints to unsinstall silently the SEM for reinstalletion.
 
Thanks
 
Peter
Sandeep Cheema's picture

Very interesting Doc.
 
That link still has no traces of SEP, any other links ?
 
 
Aaed Alqarta's picture

Ok, would you please send them as a PM ?
 
thanks

Symantec Certified Specialist
Experts-Exchange Certified Master (Antivirus / Symantec Antivirus / Enterprise Antivirus / Server Antivirus)
http://extremesecurity.blogspot.com

ptheisinger's picture

Hello,
 
can I have the steps to; I have to uninstall some clients. It kind of ugent.
 
Thanks in advace.
 
Best Regards
Peter
isamudyson's picture

Hi,

Can you also PM me too?  I need it for both SEP and v8 actually.  Need to uninstall all v8 client before we can roll out SEP.


Thank you!

Roughneck's picture

Is there a way to suppress the password box when I turn off the smc service.  I have to replace the syslink.xml file on all of our clients and can't stop the service that is accessing it without supplying a password.  I wrote a script to stop the service, copy the file, and start the service. If anyone has any info on this I would really appreciate it.  Thanks  
paper's picture

i too also need help on disabling the password prompt. I need to remove endpoint from some 300 odd clients.
Ruth's picture

Hello Abhishek,
 
Can I also have the PM please, I would much appreciate your help.
 
Regards
 
Ruth
Abhishek Pradhan's picture

Hi Ruth,

Please check your PM.

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Abhishek Pradhan's picture

Hi paper,

Please check your PM as well.


Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

droc615's picture

I would need this information as well.
 
Thanks!
Abhishek Pradhan's picture

Hi Droc',

Please check your PM

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Ruth's picture

Thank you Abhishek

Regards

Ruth

Abhishek Pradhan's picture

@ Chad and Ruth

You're welcome.


Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

[V]'s picture

could I be sent the instructions too please? Thanks in advance! :smileywink:

Rebmun1's picture

hi. can i get the instructions as well?
thanks!

kurt w's picture

hi Abhishek
can i get to
Abhishek Pradhan's picture

@ [V], Rebmun1 and Kurt,

Please check your PM's. :smileyhappy:


Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Jerry Chen's picture

Hi.... Abhishek
 
I also need the info , would you please PM to me? Thanks a lot  !!
Abhishek Pradhan's picture

Hi Jerry,

Please check your PM.


Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

SAM_SHAIKH's picture

HI Sandeep,
 
Can you please send me the doc to my PM too.
 
I too need the same badly as my network is scattered and it is not possible to go to the client machine.
 
Thanks in Advance :smileyhappy:
 
Rgrds,
SAM
Mark Greifenberg's picture

Hi, can you send me the instructions. Thanks
kurt w's picture

Thanks abhishek
Aaed Alqarta's picture

hi,

can you send me the insturctions too ?


thanks

Symantec Certified Specialist
Experts-Exchange Certified Master (Antivirus / Symantec Antivirus / Enterprise Antivirus / Server Antivirus)
http://extremesecurity.blogspot.com

gtovaulty's picture

hi can someone pm me the instrution as well

thanks



Message Edited by gtovaulty on 05-15-2008 01:25 PM

Abhishek Pradhan's picture

@ Sam, Mark and Ayed,

Please check your PM's.


Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

harrjd's picture

Hi,
I'm having the same issue can you please send me the instructions

Thanks in advanced.

 

Jeff Harrison

Knottyropes's picture

Can I have it too please.
I want to run it over night and hopefully have it all back in the morning.
roclar's picture

I need to unsinstall silently the SEM for reinstalletion on 1000 machines. Are there steps to do this on a simple script?
chads1976's picture

Please PM me information for SEP and Version 10 sorry need to remove on about 1000+ workstations and need the Reg settings to remove the password lock



Message Edited by chads1976 on 05-19-2008 12:26 PM

mkwmapmb60's picture

Pls PM me the info too
many thanks
Christian Johnsen's picture

I would also like to know this information. I need to uninstall Symantec Client Security v.10 on 100 clients.

Abhishek Pradhan's picture

@ Jeff, Knottyropes, roclar, chads1976 and Christian,

Please check your PM's.


Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

DanSFI's picture

I need this information as well please. Thanks.
ebarcelos's picture

Hello!

Can you send me the steps??

My e-mail:ebarcelos@securesolution.com.br

Thanks.

Regards!

DanSFI's picture

Is there a faster way to get this information?  In all honesty, this is the type of thing that should be documented.  If this is something that can be exploited by an attacker then the product isn't secure enough to be used in a production environment.
FSGDAG's picture

Hi...
 
Please send the information to me as well through PM
 
Thanks! :)
JLOX's picture

Please send as well.
 
THNX!
wolphpak1's picture

I would also like this information.
VBAL's picture

I also need the info , would you please PM to me? Thanks a lot  !!
Hericksen's picture

Hi all!!
 
I would need this information as well.
 
Thanks in advance!!!
Abhishek Pradhan's picture

@ All,

Please check your PM's.

I've replied individually to you all.




Message Edited by Abhishek Pradhan on 05-30-2008 02:40 PM

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Serioja's picture

Hi there!
Please send the information to me as well through PM
xafiquet's picture

hello world,

same here ... please send  the information too ...

TIA!

ECUPirate28590's picture

need this script as well, Thanks:smileytongue:
ChadWhicks's picture

I would also like the steps to remove Symantec Protection Agent without knowing the password.

I sent you a pm already. Please send me one with the instrunctions on how to.

Thanks
Chad



Message Edited by ChadWhicks on 06-03-2008 08:41 PM

xafiquet's picture

hi Abhishek Pradhan

could you please send me the procedure ?

regards


ProfileX's picture

Please send me the silent install instructions.  Thanks.
Abhishek Pradhan's picture

Hi All,
 
Sorry about the delay in responding, but I've been working a consistent 15 hours for the last 2 weeks. Check your PM's by tonite, or at the max tomorrow night.

:smileyvery-happy:


 

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Leonna's picture

Please could you also send me the instructions for silent uninstallation.
 
Thanks very much in advance.
ProfileX's picture

Have you sent the silent uninstall instructions yet?  I understand you are working long hours, but it's been few days and I haven't seen anything.
 
When you say PM I assume you mean "personal message" and I check this at the top of the page where it says "You Have No Messages".
 
Thanks!
 
bluebloodman's picture

I would like to have the instruction too.
 
Will be supporting SEP for awhile.
 
Kenneth
Jaisankar :o)'s picture

Hi Abhishek,

Pls mail me too about the SEP 11.x silent uninstallation code.

Jerry Tan's picture

Hi,
I have 150 client with v11 SEP and 230 client with V10, would you also please give me the information for how to uninstall symantec on these clients? All with uninstall password protection.
 
Thank you very much,
 
Jerry Tan
 
Thanks again
Jerry Tan's picture

Hi,
I have 150 client with v11 SEP and 230 client with V10, would you also please give me the information for how to uninstall symantec on these clients? All with uninstall password
 
Thank you very much,
 
Jerry Tan
 
Thanks again
Jerry Tan's picture

Hi,
I have 130 clients with V11 SEP, and 230 client with v10, all uninstall password set up,
Would you please send me information for how to uninstall symantec remotely?
 
Thank you very much,
 
Jerry Tan
 
 
xafiquet's picture

hello,

still no message ...

waiting for the jewel ..

regards

Abhishek Pradhan's picture

@ All,

Please check your PM's.



Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

akee10's picture

Hello Abhishek,
 
Can I receive this information too please?  I'm in a testing phase of migrating our workstations from SAV Corp 10 to SEP 11 and have pushed it to several test machines.  This would prove handy in case I need to perform an uninstall during my testing.
 
Thanks very much,
Aaron Kee
RyanM 2's picture

Hi Abhishek,
 
I would also appreciate receiving this information.  We are currently rolling out SEP 11 and need to uninstall sygate from existing workstations. 
 
Thanks in advance,
 
-Ryan
Abhishek Pradhan's picture

@ Akee,

Please check your PM.

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Abhishek Pradhan's picture

@ Ryan,

the steps would work for SEP clients, not the Sygate Policy clients.


Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Pran's picture

Hi Abhishek
 
Can you please send me the Steps for the same
 
Thanx in advance.
Pran's picture

Hello,
 
Can I have the steps too I have to uninstall some clients.
 
Thanks in advace.
 
Best Regards
Pran
akee10's picture

Hello Abhishek,
 
I checked my PM but have not received any messages.  Can you please resend?
 
Regards,
Aaron
Coendo's picture

Abhishek Pradhan ,
 
Can you send me a PM with the steps as well?
 
Thanks in advance!
 
Kind Regards,
 
Coen
Mikep06's picture

I would like to be sent the uninstallation instructions as well
Abhishek Pradhan's picture

@ All,
 
Sorry about this, but it may sound rude. Due to some things that I've heard AND SEEN personally over the past few weeks, this information will be given only after successful verification of your customer numbers / contract ID's.
 
Forgive me for the same, but I believe this is the best way to prevent any SEP Endusers in your organizations from directly tampering around with the software, and in turn letting all hell break loose on the systems.
 
 

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Abhishek Pradhan's picture

Please PM me the info. DO NOT post it publicly here on the forum. :smileyhappy:

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

BV-Admin's picture

Hi Abhishek:
Can you pls send me the steps to remotely uninstall Symantec Endpoint Client? For our testing purpose we frequently need to unistall Endpoint Security client from as many as 25 computers in one go. It will be very helpful for us if it is done remotely without user intervention/
 
Thanks in advance.
 
Sanjeev
Toast's picture

I would like this information also.  Please :-)
Support-mcc's picture

Can you provide instruction on how to uninstall old version that reqiuers a uninstall password, as mentioned in this forum? 
Thanks
Jim
Abhishek Pradhan's picture

A BV-Admin,

 

Please check your PM.

 

 

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

Abhishek Pradhan's picture

@ All,

 

Like I've mentioned before - "this information will be given only after successful verification of your customer numbers / contract ID's". This is to prevent misuse of the info provided by end users or others.

 

Hope you understand.

 

 

Abhishek Pradhan, MCT, PMP
ISMS Internal Auditor (ISO 27001), SIG Lead - Microsoft Pune User Group
http://hackatac.blogspot.com | http://www.puneusergroup.org
"You can always spot a happy biker by the bugs in his teeth....."

jG@'s picture

Hi Abhishek,

 

can you please PM me the tutorial ? We are using endpoint with landesk agent is there also chance to be blocked by landesk agent ? I'm not the guy who did initial setup of package and there is no password supplied for install script. Thanks for help.

 

Jiri

SCL's picture

HI

We have installed Symantec Endpoint Protection 11 in our company.We are facing error in c:\program files\common files\symantec shared\ccL60U8.dll and \ccL608.dll after the client is infected with w32.blackmal virus.

We want a workaround for this. Can you please send me the procedure to delete the virus and recover the SEP.

Our customer number is
Please check and let us the know the solution.Please reply to dr.anusha@scl.co.in.

Expecting your reply at the earliest.

Thanks and Regards
Anusha
SCL
Chennai

Message Edited by Helen_Gressman on 10-01-2008 08:57 AM

jcc's picture

Hi Abhishek

 

I need to know how to uninstall SEP, it's require me to enter password. Currently I do SEP project, I installed SEPM inside a server, follow by I need to install sep client, but thru find unmanaged PC, I rollout to that server failed. and I need to uninstall it, and try to install again. Or you have any idea to resolve it? Please help me. I will really appreciate. Thank you

 

jcc

KennethJ's picture

Can I please have the steps also? I have PM'd verification info.

 

Thanks,

Kenneth Jones

jeffwichman's picture

Please PM me these steps as well

Guilherme's picture

Heloo could you please send me the procedures?

DiZzyDMon's picture

Add me to the cast of thousands who need to be able to uninstall SEP from a command line.

 

I don't even know what a "PM" is, but if I have one, please send the solution to mine....

Message Edited by DiZzyDMon on 08-15-2008 12:45 PM
Nourbakhsh's picture

Hello, Is it possible get the hints for unsinstalling silently on Clients for me too ? (PM or email)

 

Many thank's - Nourbakhsh