How to automatically remove NOD32 4.0.474.0 in script or ERAC?

So I'm trying to remove 4.0.474.0 from our computers and would rather not walk around manually firing off the uninstall on countless machines. This is a section of a startup script:

Code:

:CHECK4.0.474.0
reg query hklm\Software\Classes\Installer\Products\3CBA4686289AB634EB1F65256D033316

if ERRORLEVEL 0 GOTO FOUND4.0.474.0 

:FOUND4.0.474.0
start /wait "a" "%ProgramFiles%\ESET\ESET NOD32 Antivirus\callmsi.exe" /i {6864ABC3-A982-436B-BEF1-5652D6303361} /qn /norestart PASSWORD=password
exit /b

I don't like specifying the password on the command line like this but this is the least of my worries at the moment. Running as a startup script in a GPO the result is this error:

Code:

Event Type:	Error
Event Source:	MsiInstaller
Event Category:	None
Event ID:	11706
Date:		4/12/2010
Time:		11:57:50 AM
User:		NT AUTHORITY\SYSTEM
Computer:	WS013
Description:
Product: ESET NOD32 Antivirus -- Error 1706. An installation package for the product ESET NOD32 Antivirus cannot be found. Try the installation again using a valid copy of the installation package 'setup.msi'.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 36 38 36 34 41 42 43   {6864ABC
0008: 33 2d 41 39 38 32 2d 34   3-A982-4
0010: 33 36 42 2d 42 45 46 31   36B-BEF1
0018: 2d 35 36 35 32 44 36 33   -5652D63
0020: 30 33 33 36 31 7d         03361}  

The ESET NOD32 4.0.474.0 installations were pushed out via the ERAC console's Remote Install feature. What am I doing wrong?

 

If you use the 4.0.474.0 installer you can use the following command-line:

msiexec /x "\\server\share\eav_nt64_enu.msi" /qn /norestart PASSWORD=password

If you want to use the uninstaller provided by Eset on the machine you should look up the GUID in 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall' and use that to add to the msiexec

Like:

msiexec /qn /password=password /x{EFF43CCD-6619-4781-915B-E8D167E9393A}
(EFF43CCD-6619-4781-915B-E8D167E9393A = 4.2.40.0)

Tested here on the command line (not by login script) and its working fine.

 

The KB says not to do that: http://kb.eset.com/esetkb/index?page=content&id=SOLN2116 and specifically mentions using the callmsi.exe program, hence my confusion.

Is there a way to do a push uninstall through ERAC? I don't mind doing that manually on the workstations.

 

The shortcut of my 'uninstall' entry in the start menu which is calling 'callmsi' in the ESET program dir is calling the same GUID as posted earlier so it should be ok?

And yes, I think in ERA you can make a package with '/x /qn REBOOT="ReallySuppress" password=password' but that would do just the same as my first suggestion.

 

Don't see anything wrong w/ that as well... BTW, you could also use psexec from the Sysinternals suite to uninstall remotely, without logon scripts and such.

 

Thanks, have uninstalled with ERAC.