How to automatically remove NOD32 4.0.474.0 in script or ERAC?

Discussion in 'ESET NOD32 Antivirus' started by gmiest, Apr 12, 2010.

Thread Status:
Not open for further replies.
  1. gmiest

    gmiest Registered Member

    Joined:
    Feb 2, 2010
    Posts:
    43
    So I'm trying to remove 4.0.474.0 from our computers and would rather not walk around manually firing off the uninstall on countless machines. This is a section of a startup script:
    Code:
    :CHECK4.0.474.0
    reg query hklm\Software\Classes\Installer\Products\3CBA4686289AB634EB1F65256D033316
    
    if ERRORLEVEL 0 GOTO FOUND4.0.474.0 
    
    :FOUND4.0.474.0
    start /wait "a" "%ProgramFiles%\ESET\ESET NOD32 Antivirus\callmsi.exe" /i {6864ABC3-A982-436B-BEF1-5652D6303361} /qn /norestart PASSWORD=password
    exit /b
    
    I don't like specifying the password on the command line like this but this is the least of my worries at the moment. Running as a startup script in a GPO the result is this error:

    Code:
    Event Type:	Error
    Event Source:	MsiInstaller
    Event Category:	None
    Event ID:	11706
    Date:		4/12/2010
    Time:		11:57:50 AM
    User:		NT AUTHORITY\SYSTEM
    Computer:	WS013
    Description:
    Product: ESET NOD32 Antivirus -- Error 1706. An installation package for the product ESET NOD32 Antivirus cannot be found. Try the installation again using a valid copy of the installation package 'setup.msi'.
    
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 7b 36 38 36 34 41 42 43   {6864ABC
    0008: 33 2d 41 39 38 32 2d 34   3-A982-4
    0010: 33 36 42 2d 42 45 46 31   36B-BEF1
    0018: 2d 35 36 35 32 44 36 33   -5652D63
    0020: 30 33 33 36 31 7d         03361}  
    
    The ESET NOD32 4.0.474.0 installations were pushed out via the ERAC console's Remote Install feature. What am I doing wrong?
     
  2. Brambb

    Brambb Registered Member

    Joined:
    Sep 25, 2006
    Posts:
    411
    Location:
    The Netherlands
    If you use the 4.0.474.0 installer you can use the following command-line:

    msiexec /x "\\server\share\eav_nt64_enu.msi" /qn /norestart PASSWORD=password

    If you want to use the uninstaller provided by Eset on the machine you should look up the GUID in 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall' and use that to add to the msiexec

    Like:

    msiexec /qn /password=password /x{EFF43CCD-6619-4781-915B-E8D167E9393A}
    (EFF43CCD-6619-4781-915B-E8D167E9393A = 4.2.40.0)

    Tested here on the command line (not by login script) and its working fine.
     
  3. gmiest

    gmiest Registered Member

    Joined:
    Feb 2, 2010
    Posts:
    43
  4. Brambb

    Brambb Registered Member

    Joined:
    Sep 25, 2006
    Posts:
    411
    Location:
    The Netherlands
    The shortcut of my 'uninstall' entry in the start menu which is calling 'callmsi' in the ESET program dir is calling the same GUID as posted earlier so it should be ok?

    And yes, I think in ERA you can make a package with '/x /qn REBOOT="ReallySuppress" password=password' but that would do just the same as my first suggestion.
     
  5. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    Don't see anything wrong w/ that as well... BTW, you could also use psexec from the Sysinternals suite to uninstall remotely, without logon scripts and such.
     
  6. gmiest

    gmiest Registered Member

    Joined:
    Feb 2, 2010
    Posts:
    43
    Thanks, have uninstalled with ERAC.
     
Thread Status:
Not open for further replies.