API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 27th, 2017
89
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 18.10 KB | None | 0 0
raw download clone embed print report
  1. @ECHO OFF
  2. ECHO ================================================== ==================
  3. ECHO Sophos Anti-Virus 5.x / Sophos Anti-Virus 6.x -- Removal Script
  4. ECHO.
  5. ECHO APPH Runcorn Landing Gears.
  6. Echo.
  7. ECHO Press any key to continue, or press Ctrl-C to Cancel.
  8. ECHO ================================================== ==================
  9. ECHO.
  10. Pause.
  11. CLS
  12.  
  13. ver|find "Windows XP" > NUL
  14. if errorlevel 1 goto 2K
  15. ECHO Windows XP Detected.
  16. TASKKILL /F /IM "Almon.exe" >NUL 2>NUL
  17. REM === Checks to ensure EM Lib, Console or PM are not installed ===
  18. if exist "%PROGRAMFILES%\sophos\enterprise console\cac.pem" GOTO ERR
  19. if exist "%PROGRAMFILES%\sophos\enterprise manager\library\cac.pem" GOTO ERR
  20. if exist "%PROGRAMFILES%\Sophos\PureMessage\bin\puremessage .msc" (GOTO ERR) ELSE (GOTO PASS)
  21.  
  22. :2K
  23. ver|find "Windows 2000" >NUL
  24. if errorlevel 1 goto 2k3
  25. ECHO Windows 2000 Detected.
  26. REM === Checks to ensure EM Lib, Console or PM are not installed ===
  27. if exist "%PROGRAMFILES%\sophos\enterprise console\cac.pem" GOTO ERR
  28. if exist "%PROGRAMFILES%\sophos\enterprise manager\library\cac.pem" GOTO ERR
  29. if exist "%PROGRAMFILES%\Sophos\PureMessage\bin\puremessage .msc" (GOTO ERR) ELSE (GOTO PASS)
  30.  
  31. :2K3
  32. ver|find "Version 5.2" >NUL
  33. if errorlevel 1 goto ERR
  34. ECHO Windows 2003 Detected.
  35. TASKKILL /F /IM "Almon.exe" >NUL 2>NUL
  36. REM === Checks to ensure EM Lib, Console or PM are not installed ===
  37. if exist "%PROGRAMFILES%\sophos\enterprise console\cac.pem" GOTO ERR
  38. if exist "%PROGRAMFILES%\sophos\enterprise manager\library\cac.pem" GOTO ERR
  39. if exist "%PROGRAMFILES%\Sophos\PureMessage\bin\puremessage .msc" (GOTO ERR) ELSE (GOTO PASS)
  40.  
  41. :PASS
  42.  
  43. ECHO.
  44. ECHO Performing regular MSI based removal...
  45. MSIEXEC /X {15C418EB-7675-42be-B2B3-281952DA014D} /qn /l*v c:\sau2_unist.txt 2> NUL
  46. MSIEXEC /X {C12953C2-4F15-4A6C-91BC-511B96AE2775} /qn /l*v c:\sau_unist.txt 2> NUL
  47. MSIEXEC /X {09C6BF52-6DBA-4A97-9939-B6C24E4738BF} REBOOT=SUPPRESS /qn /l*v c:\sav_unist.txt 2> NUL
  48. MSIEXEC /X {FF11005D-CBC8-45D5-A288-25C7BB304121} /qn /l*v c:\rms_unist.txt 2> NUL
  49. ECHO Completed.
  50.  
  51. ECHO.
  52. ECHO Performing MSI Cleanup (if available)...
  53. "%PROGRAMFILES%\Windows Installer Clean Up\MSIZAP.EXE" tw {15C418EB-7675-42be-B2B3-281952DA014D} > C:\sop_msiclnup.txt
  54. ECHO -===- END OF SAU2 -===- >> C:\sop_msiclnup.txt
  55.  
  56. "%PROGRAMFILES%\Windows Installer Clean Up\MSIZAP.EXE" tw {09C6BF52-6DBA-4A97-9939-B6C24E4738BF} >> C:\sop_msiclnup.txt
  57. ECHO -===- END OF SAV -===- >> C:\sop_msiclnup.txt
  58.  
  59. "%PROGRAMFILES%\Windows Installer Clean Up\MSIZAP.EXE" tw {C12953C2-4F15-4A6C-91BC-511B96AE2775} >> C:\sop_msiclnup.txt
  60. ECHO -===- END OF SAU -===- >> C:\sop_msiclnup.txt
  61.  
  62. "%PROGRAMFILES%\Windows Installer Clean Up\MSIZAP.EXE" tw {FF11005D-CBC8-45D5-A288-25C7BB304121} >> C:\sop_msiclnup.txt
  63. ECHO -===- END OF RMS -===- >> C:\sop_msiclnup.txt
  64. Echo Completed.
  65.  
  66. ECHO.
  67. ECHO Constructing Registry Keys for removal...
  68. ECHO Completed.
  69.  
  70. ECHO REGEDIT4 > %TEMP%\SOTMP.REG
  71. ECHO. >> %TEMP%\SOTMP.REG
  72.  
  73. REM ====** Registry Keys marked for Removal **================================================ =====================
  74.  
  75. REM === MSI Installer GUIDs ===
  76. ECHO [-HKEY_CLASSES_ROOT\Installer\Products\25FB6C90ABD67 9A499936B2CE47483FB] >> %TEMP%\SOTMP.REG
  77. ECHO [-HKEY_CLASSES_ROOT\Installer\Products\BE814C515767e b242B3B829125AD10D4] >> %TEMP%\SOTMP.REG
  78. ECHO [-HKEY_CLASSES_ROOT\Installer\Products\2C35921C51F4C 6A419CB15B169EA7257] >> %TEMP%\SOTMP.REG
  79. ECHO [-HKEY_CLASSES_ROOT\Installer\Products\D50011FF8CBC5 D542A88527CBB031412] >> %TEMP%\SOTMP.REG
  80.  
  81. ECHO [-HKEY_CLASSES_ROOT\Installer\Features\25FB6C90ABD67 9A499936B2CE47483FB] >> %TEMP%\SOTMP.REG
  82. ECHO [-HKEY_CLASSES_ROOT\Installer\Features\BE814C515767e b242B3B829125AD10D4] >> %TEMP%\SOTMP.REG
  83. ECHO [-HKEY_CLASSES_ROOT\Installer\Features\2C35921C51F4C 6A419CB15B169EA7257] >> %TEMP%\SOTMP.REG
  84. ECHO [-HKEY_CLASSES_ROOT\Installer\Features\D50011FF8CBC5 D542A88527CBB031412] >> %TEMP%\SOTMP.REG
  85.  
  86. ECHO [-HKEY_CLASSES_ROOT\Installer\UpgradeCodes\E932B7952 303A1943A2218777329E5A8] >> %TEMP%\SOTMP.REG
  87. ECHO [-HKEY_CLASSES_ROOT\Installer\UpgradeCodes\0D6888B32 A8929940ACA98A3DEBB94B4] >> %TEMP%\SOTMP.REG
  88. ECHO [-HKEY_CLASSES_ROOT\Installer\UpgradeCodes\A2ECF5789 F971654CBB5476964870E94] >> %TEMP%\SOTMP.REG
  89.  
  90. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\25FB6C90ABD679A499936B2CE47483FB] >> %TEMP%\SOTMP.REG
  91. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\BE814C515767eb242B3B829125AD10D4] >> %TEMP%\SOTMP.REG
  92. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\2C35921C51F4C6A419CB15B169EA7257] >> %TEMP%\SOTMP.REG
  93. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\D50011FF8CBC5D542A88527CBB031412] >> %TEMP%\SOTMP.REG
  94.  
  95. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\25FB6C90ABD679A499936B2CE47483FB] >> %TEMP%\SOTMP.REG
  96. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\BE814C515767eb242B3B829125AD10D4] >> %TEMP%\SOTMP.REG
  97. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\2C35921C51F4C6A419CB15B169EA7257] >> %TEMP%\SOTMP.REG
  98. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\D50011FF8CBC5D542A88527CBB031412] >> %TEMP%\SOTMP.REG
  99.  
  100. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Upgr adeCodes\E932B7952303A1943A2218777329E5A8] >> %TEMP%\SOTMP.REG
  101. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Upgr adeCodes\0D6888B32A8929940ACA98A3DEBB94B4] >> %TEMP%\SOTMP.REG
  102. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Upgr adeCodes\A2ECF5789F971654CBB5476964870E94] >> %TEMP%\SOTMP.REG
  103.  
  104. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UpgradeCodes\E932B7952303A194 3A2218777329E5A8] >> %TEMP%\SOTMP.REG
  105. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UpgradeCodes\0D6888B32A892994 0ACA98A3DEBB94B4] >> %TEMP%\SOTMP.REG
  106. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UpgradeCodes\A2ECF5789F971654 CBB5476964870E94] >> %TEMP%\SOTMP.REG
  107.  
  108. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Products\25FB6C90ABD679A499936B2CE47483FB] >> %TEMP%\SOTMP.REG
  109. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Products\BE814C515767eb242B3B829125AD10D4] >> %TEMP%\SOTMP.REG
  110. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Products\2C35921C51F4C6A419CB15B169EA7257] >> %TEMP%\SOTMP.REG
  111. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Products\D50011FF8CBC5D542A88527CBB031412] >> %TEMP%\SOTMP.REG
  112.  
  113. REM === Sophos Application Settings ===
  114. ECHO [-HKEY_CURRENT_USER\Software\Sophos] >> %TEMP%\SOTMP.REG
  115. ECHO [-HKEY_LOCAL_MACHINE\Software\Sophos] >> %TEMP%\SOTMP.REG
  116.  
  117. REM === Sophos Uninstall Keys ===
  118. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{09C6BF52-6DBA-4A97-9939-B6C24E4738BF}] >> %TEMP%\SOTMP.REG
  119. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{15C418EB-7675-42be-B2B3-281952DA014D}] >> %TEMP%\SOTMP.REG
  120. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{C12953C2-4F15-4A6C-91BC-511B96AE2775}] >> %TEMP%\SOTMP.REG
  121. ECHO [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{FF11005D-CBC8-45D5-A288-25C7BB304121}] >> %TEMP%\SOTMP.REG
  122.  
  123. REM === Sophos Legacy Services Set01 ===
  124. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SAVADMINSERVICE] >> %TEMP%\SOTMP.REG
  125. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SAVONACCESS_CONTROL] >> %TEMP%\SOTMP.REG
  126. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SAVONACCESS_FILTER] >> %TEMP%\SOTMP.REG
  127. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SAVSERVICE] >> %TEMP%\SOTMP.REG
  128. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SOPHOS_AGENT] >> %TEMP%\SOTMP.REG
  129. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SOPHOS_AUTOUPDATE_AGENT] >> %TEMP%\SOTMP.REG
  130. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SOPHOS_AUTOUPDATE_SERVICE] >> %TEMP%\SOTMP.REG
  131. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_SOPHOS_MESSAGE_ROUTER] >> %TEMP%\SOTMP.REG
  132.  
  133. REM === Sophos Event Log Registration Set01 ===
  134. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\E ventlog\Application\SophosAntiVirus] >> %TEMP%\SOTMP.REG
  135. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\E ventlog\System\SAVOnAccess Control] >> %TEMP%\SOTMP.REG
  136. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\E ventlog\System\SAVOnAccess Filter] >> %TEMP%\SOTMP.REG
  137.  
  138. REM === Sophos Services Set01 ===
  139. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S AVAdminService] >> %TEMP%\SOTMP.REG
  140. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S AVOnAccess Control] >> %TEMP%\SOTMP.REG
  141. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S AVOnAccess Filter] >> %TEMP%\SOTMP.REG
  142. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S AVService] >> %TEMP%\SOTMP.REG
  143. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S ophos Agent] >> %TEMP%\SOTMP.REG
  144. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S ophos AutoUpdate Agent] >> %TEMP%\SOTMP.REG
  145. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S ophos AutoUpdate Service] >> %TEMP%\SOTMP.REG
  146. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S ophos Message Router] >> %TEMP%\SOTMP.REG
  147.  
  148. REM === Sophos Legacy Services Current===
  149. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SAVADMINSERVICE] >> %TEMP%\SOTMP.REG
  150. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SAVONACCESS_CONTROL] >> %TEMP%\SOTMP.REG
  151. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SAVONACCESS_FILTER] >> %TEMP%\SOTMP.REG
  152. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SOPHOS_AGENT] >> %TEMP%\SOTMP.REG
  153. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SAVSERVICE] >> %TEMP%\SOTMP.REG
  154. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SOPHOS_AUTOUPDATE_AGENT] >> %TEMP%\SOTMP.REG
  155. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SOPHOS_AUTOUPDATE_SERVICE] >> %TEMP%\SOTMP.REG
  156. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_SOPHOS_MESSAGE_ROUTER] >> %TEMP%\SOTMP.REG
  157.  
  158. REM === Sophos Event Log Registration Current ===
  159. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Application\SophosAntiVirus] >> %TEMP%\SOTMP.REG
  160. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\System\SAVOnAccess Control] >> %TEMP%\SOTMP.REG
  161. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\System\SAVOnAccess Filter] >> %TEMP%\SOTMP.REG
  162.  
  163. REM === Sophos Services Current ===
  164. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SAVAdminService] >> %TEMP%\SOTMP.REG
  165. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SAVOnAccess Control] >> %TEMP%\SOTMP.REG
  166. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SAVOnAccess Filter] >> %TEMP%\SOTMP.REG
  167. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SAVService] >> %TEMP%\SOTMP.REG
  168. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Sophos Agent] >> %TEMP%\SOTMP.REG
  169. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Sophos AutoUpdate Agent] >> %TEMP%\SOTMP.REG
  170. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Sophos AutoUpdate Service] >> %TEMP%\SOTMP.REG
  171. ECHO [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Sophos Message Router] >> %TEMP%\SOTMP.REG
  172.  
  173. REM ================================================== ================================================== ==========
  174.  
  175. ECHO.
  176. ECHO Stopping Sophos Anti-Virus Services...
  177. net stop "Sophos Agent" 2> NUL
  178. net stop "Sophos Anti-Virus" 2> NUL
  179. net stop "Sophos Anti-Virus status reporter" 2> NUL
  180. net stop "Sophos AutoUpdate Service" 2> NUL
  181. net stop "Sophos Message Router" 2> NUL
  182. ECHO Completed.
  183.  
  184. GOTO SERXP
  185.  
  186. :RESUME
  187. ECHO.
  188. ECHO Unregistering DLLs...
  189.  
  190. REM === Sophos Anti-Virus DLLs ===
  191. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\backgroundscanning.dll"
  192. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\componentmanager.dll"
  193. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\configuration.dll"
  194. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\desktopmessaging.dll"
  195. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\driveprocessor.dll"
  196. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\eeconsumer.dll"
  197. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\filterprocessors.dll"
  198. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\fsdecomposer.dll"
  199. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\icadapter.dll"
  200. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\icmanagement.dll"
  201. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\icprocessors.dll"
  202. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\legacyconsumers.dll"
  203. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\localisation.dll"
  204. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\logging.dll"
  205. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\persistance.dll"
  206. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\SAVI0.dll"
  207. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\SAVMSCM.DLL"
  208. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\savshellext.dll"
  209. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\scaneditexports.dll"
  210. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\scaneditfacade.dll"
  211. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\scanmanagement.dll"
  212. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\security.dll"
  213. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\sophtaineradapter.dll"
  214. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\systeminformation.dll"
  215. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\threatdetection.dll"
  216. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\threatmanagement.dll"
  217. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\translators.dll"
  218. regsvr32 /u /s "%PROGRAMFILES%\Sophos\Sophos Anti-Virus\virusdetection.dll"
  219.  
  220. REM === Sophos AutoUpdate DLLs ===
  221. regsvr32 /u /s "%PROGRAMFILES%\Sophos\AutoUpdate\cidsync.dll"
  222. regsvr32 /u /s "%PROGRAMFILES%\Sophos\AutoUpdate\config.dll"
  223. regsvr32 /u /s "%PROGRAMFILES%\Sophos\AutoUpdate\inetconn.dll "
  224. regsvr32 /u /s "%PROGRAMFILES%\Sophos\AutoUpdate\InstlMgr.dll "
  225. regsvr32 /u /s "%PROGRAMFILES%\Sophos\AutoUpdate\ispsheet.dll "
  226. regsvr32 /u /s "%PROGRAMFILES%\Sophos\AutoUpdate\logger.dll"
  227. ECHO Completed.
  228.  
  229. ECHO.
  230. ECHO Removing the Sophos Installation Files...
  231.  
  232. REM === Emtpies the temporary files folders, folders are recreated if they are empty ===
  233. RD /s /Q %TEMP% 2> NUL
  234. MD %TEMP% 2> NUL
  235. RD /s /Q %WINDIR%\TEMP\ 2> NUL
  236. MD %WINDIR%\Temp 2> NUL
  237.  
  238. REM === Remove Sophos created folders and files ===
  239. RD /S /Q "%PROGRAMFILES%\SOPHOS\AutoUpdate" 2> NUL
  240. RD /S /Q "%PROGRAMFILES%\SOPHOS\Sophos Anti-Virus" 2> NUL
  241. RD /S /Q "%PROGRAMFILES%\SOPHOS\Remote Management System" 2> NUL
  242. RD /S /Q "%PROGRAMFILES%\SOPHOS\" 2> NUL
  243. RD /S /Q "C:\SAVXPSA" 2> NUL
  244. RD /s /Q "%ALLUSERSPROFILE%\Start Menu\Programs\Sophos" 2> NUL
  245. RD /S /Q "%ALLUSERSPROFILE%\Application Data\Sophos" 2> NUL
  246. RD /S /Q "%USERPROFILE%\Application Data\Sophos" 2> NUL
  247. DEL /Q "%ALLUSERSPROFILE%\Start Menu\Programs\Startup\AutoUpdate Monitor.lnk" 2> NUL
  248. RD /S /Q "%WINDIR%\Installer\{09C6BF52-6DBA-4A97-9939-B6C24E4738BF}" 2> NUL
  249. RD /S /Q "%WINDIR%\Installer\{15C418EB-7675-42be-B2B3-281952DA014D}" 2> NUL
  250. RD /S /Q "%WINDIR%\Installer\{C12953C2-4F15-4A6C-91BC-511B96AE2775}" 2> NUL
  251. RD /S /Q "%WINDIR%\Installer\{FF11005D-CBC8-45D5-A288-25C7BB304121}" 2> NUL
  252. DEL /Q "%WINDIR%\System32\Drivers\savonaccesscontrol. sys" 2> NUL
  253. DEL /Q "%WINDIR%\System32\Drivers\savonaccessfilter.s ys" 2> NUL
  254. ECHO Completed.
  255.  
  256. REM === Remove the typical Sophos account/groups for Sophos AutoUpdate ===
  257. ECHO.
  258. ECHO Deleting Sophos Accounts and Sophos Groups...
  259. Net user SophosSAU%COMPUTERNAME%0 /DELETE 2> NUL
  260. Net user SophosSAU%COMPUTERNAME%1 /DELETE 2> NUL
  261. Net user SophosSAU%COMPUTERNAME%2 /DELETE 2> NUL
  262. Net user SophosSAU%COMPUTERNAME%3 /DELETE 2> NUL
  263.  
  264. Net localgroup SophosAdministrator /DELETE 2> NUL
  265. Net localgroup SophosOnAccess /DELETE 2> NUL
  266. Net localgroup SophosPowerUser /DELETE 2> NUL
  267. Net localgroup SophosUser /DELETE 2> NUL
  268. ECHO Completed.
  269.  
  270. GOTO END
  271.  
  272. :SERXP
  273. ver|find "Windows XP" > NUL
  274. if errorlevel 1 goto SER2K3
  275. ECHO.
  276. ECHO (XP) Deleting Sophos Services...
  277. sc delete SAVService > NUL
  278. sc delete SAVAdminService > NUL
  279. sc delete "Sophos Agent" > NUL
  280. sc delete "Sophos AutoUpdate Agent" > NUL
  281. sc delete "Sophos AutoUpdate Service" > NUL
  282. sc delete "Sophos Message Router" > NUL
  283. ECHO Completed.
  284. ECHO.
  285. ECHO Removing the Sophos Registry Keys...
  286. SC create SopReg binpath= "cmd /K START /WAIT REGEDIT /S %TEMP%\SOTMP.REG" type= own type= interact
  287. sc start "SopReg" > NUL
  288. sc delete "SopReg"
  289. ECHO Completed.
  290. GOTO RESUME
  291.  
  292. :SER2K3
  293. ver|find "Version 5.2" >NUL
  294. if errorlevel 1 goto SER2K
  295. ECHO.
  296. ECHO (2K3) Deleting Sophos Services...
  297. sc delete SAVService > NUL
  298. sc delete SAVAdminService > NUL
  299. sc delete "Sophos Agent" > NUL
  300. sc delete "Sophos AutoUpdate Agent" > NUL
  301. sc delete "Sophos AutoUpdate Service" > NUL
  302. sc delete "Sophos Message Router" > NUL
  303. ECHO Completed.
  304. ECHO.
  305. ECHO Removing the Sophos Registry Keys...
  306. SC create SopReg binpath= "cmd /K START /WAIT REGEDIT /S %TEMP%\SOTMP.REG" type= own type= interact
  307. sc start "SopReg" > NUL
  308. sc delete "SopReg"
  309. ECHO Completed.
  310. GOTO RESUME
  311.  
  312. :SER2K
  313. ver|find "Windows 2000" >NUL
  314. if errorlevel 1 goto END
  315. ECHO.
  316. ECHO Removing the Sophos Registry Keys...
  317. REGEDIT /S %TEMP%\SOTMP.REG
  318. ECHO Completed.
  319. GOTO RESUME
  320.  
  321. :END
  322. ECHO.
  323. ECHO ================================================== ==
  324. ECHO Please reboot the computer and run this script again
  325. ECHO If you have not already done so.
  326. ECHO ================================================== ==
  327. Echo.
  328. Pause
  329. EXIT
  330.  
  331. :ERR
  332. ECHO.
  333. ECHO ================================================== ============
  334. ECHO Script has terminated because either your O.S is Windows 9x/NT
  335. ECHO OR Puremessage/Enterprise Console/EM Library was found.
  336. ECHO ================================================== ============
  337. Pause
  338. EXIT
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!