Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Server 2008 r2 NIC

  • Please log in to reply
2 replies to this topic

#1 conway784


  • Members
  • 16 posts
  • Local time:01:25 PM

Posted 02 May 2017 - 01:54 PM

Hi Guys,


I recently removed symantec endpoint protection from my server, it was disabled. My nic now shows i am not connected to the network. If i unplug the cable, it shows cable unplugged. 


I am running an hp proliant ml350 g6.



Thanks for your help

BC AdBot (Login to Remove)


#2 SleepyDude


  • Malware Response Team
  • 3,128 posts
  • Gender:Male
  • Location:Portugal
  • Local time:05:25 PM

Posted 02 May 2017 - 03:34 PM

Symantec have manual instructions for removal here or maybe using the CleanWipe utility its not uncommon that AV removal leaves traces behind...

• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

Proud graduate of GeekU and member of UNITE


#3 JohnnyJammer


  • Members
  • 1,118 posts
  • Gender:Male
  • Location:QLD Australia
  • Local time:03:25 AM

Posted 03 May 2017 - 05:59 PM

I wrote a batch file a while back to remove SEP.


@echo off
set txtfile=C:\%computername%_SymantecGUID.txt
IF NOT EXIST %txtfile% (wmic product where name="Symantec Endpoint Protection" get identifyingnumber | find /i "{" >> %txtfile%) ELSE (    
    DEL %txtfile%    
    ping -n 5 > null
    wmic product where name="Symantec Endpoint Protection" get identifyingnumber | find /i "{" >> %txtfile%
    ECHO DONE Getting GUID.....

    ECHO Uninstalling LiveUpdate
    IF EXIST ("C:\Program Files (x86)\Symantec\LiveUpdate\LSETUP.EXE") DO (
    %comspec% /c "C:\Program Files (x86)\Symantec\LiveUpdate\LSETUP.EXE" /u /q
    ) ELSE (
    %comspec% /c "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /q /u

    ECHO Starting uninstall in 5 seconds....
    ping -n 5 > null

FOR /F "tokens=1 delims=" %%A in (%txtfile%) DO (
    echo Running msiexec /X %%A /qb
    %comspec% /c MsiExec.exe /X %%A /qn /norestart
::del C:\SymantecEndPoint_Remover.bat
del %txtfile%
del null

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users