Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Server 2008 r2 NIC


  • Please log in to reply
2 replies to this topic

#1 conway784

conway784

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 02 May 2017 - 01:54 PM

Hi Guys,

 

I recently removed symantec endpoint protection from my server, it was disabled. My nic now shows i am not connected to the network. If i unplug the cable, it shows cable unplugged. 

 

I am running an hp proliant ml350 g6.

 

 

Thanks for your help



BC AdBot (Login to Remove)

 


#2 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,995 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:02:14 AM

Posted 02 May 2017 - 03:34 PM

Hi,
 
Symantec have manual instructions for removal here or maybe using the CleanWipe utility its not uncommon that AV removal leaves traces behind...


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#3 JohnnyJammer

JohnnyJammer

  • Members
  • 1,117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:QLD Australia
  • Local time:11:14 AM

Posted 03 May 2017 - 05:59 PM

I wrote a batch file a while back to remove SEP.

 

@echo off
set txtfile=C:\%computername%_SymantecGUID.txt
IF NOT EXIST %txtfile% (wmic product where name="Symantec Endpoint Protection" get identifyingnumber | find /i "{" >> %txtfile%) ELSE (    
    DEL %txtfile%    
    ping -n 5 127.0.0.1 > null
    wmic product where name="Symantec Endpoint Protection" get identifyingnumber | find /i "{" >> %txtfile%
    ECHO DONE Getting GUID.....
    )

    ECHO Uninstalling LiveUpdate
    IF EXIST ("C:\Program Files (x86)\Symantec\LiveUpdate\LSETUP.EXE") DO (
    %comspec% /c "C:\Program Files (x86)\Symantec\LiveUpdate\LSETUP.EXE" /u /q
    ) ELSE (
    %comspec% /c "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /q /u
           )


    ECHO Starting uninstall in 5 seconds....
    ping -n 5 127.0.0.1 > null

FOR /F "tokens=1 delims=" %%A in (%txtfile%) DO (
    echo Running msiexec /X %%A /qb
    %comspec% /c MsiExec.exe /X %%A /qn /norestart
)
::del C:\SymantecEndPoint_Remover.bat
del %txtfile%
del null
 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users