Endpoint Protection

Dear Community,

I have used ESET's Rip and replace function to remove existing installations of SEP.

Following a successful uninstallation, it would appear as though a couple of SEP related drivers remain.

eeCtrl       Symantec Eraser Contro Symantec Eraser Contro Kernel        System     Running    OK         TRUE        FALSE        311,296    4,096      0      03/01/2017 20:13:22    \??\C:\Program Files\Common Files\Symantec Share 4,096    

There is also some residue left in the Common Files folder:

C:\Program Files\Common Files\Symantec Shared\

What is this driver and does it matter if it stays on the machine whilst the new AV product is installed?

Thanks very much

If you have no additional Symantec products on the system than that folder and all of its contents can be removed.

Thanks Brian,

Although I have a question - Given that it is a driver, wouldn't removing it cause problems / unnecessary build up of event logs?

Thanking you.

It's part of SEP, so if you're removing SEP it needs to go.

What is the process to remove this driver?

Can I simply erase the contents of C:\Program Files\Common Files\Symantec Shared\ ?

Or is there prehaps more to it? (Ie. modifying the registry, etc?)

As far as I know simply deleting the folder takes care of it. You can also use cleanwipe but it would need to be run manually as it is not silent.