locked
Forefront Deployment/Symantec Removal RRS feed

  • Question

  • I've been trying to come up with the best process for deploying forefront in an environment where Symantec AV is installed.  The Forefront deployment is going fine, but the symantec portion is presenting some problems.  Here is the process we've been using:

    1.  We deploy forefront with symantec still installed to ensure there is no gap in protection
    2.  We are disabling all symantec services via group policy and via symantec console once forefront has been installed
    3.  We will later uninstall symantec via script.

    We are experiencing some problems with performance on the client machines even though symantec services are seemingly disabled.   You can't see any processes taking up excessive memory or CPU, the machines are just extremely sluggish. 

    Does anyone have any ideas? 

    Thursday, August 27, 2009 3:10 PM

Answers

  • Here's the batch file I used...

    @echo off
    goto meat
    rem     MET April 10, 2008 - WBS Symantec Uninstall Batch File
    rem     This will attempt to uninstall Symantec Corporate Anti-Virus from the current machine.
    rem     The echo statements create a self-documenting log file in wbssu.txt.
    rem     MET April 24, 2008 - Configuring to run 3 times maximum on one machine.
    rem     Using any command line character will skip the initial delay.
    rem
    rem     *** Skip Uninstall if Forefront doesn't exist!

    :meat
    cls
    echo.
    echo.
    echo Removing Symantec Corporate AntiVirus from your machine...
    echo   Please be patient, this can take 10 minutes...
    echo.
    echo.

    rem Test for command line switch of any sort and jump to manual.
    if %1x==x goto slow
    goto manual

    :slow
    rem     Test and skip if I've already done this 3 times...
    if exist c:\wbssu3.txt goto end

    rem     Test for existing Forefront installation before allowing NAV uninstall
    if not exist "%programfiles%\Microsoft Forefront\Client Security\Client\SSA\Results\*" goto end

    rem Wait 5 minutes for booting machine to stabilize.
    ping -n 301 127.0.0.1 > nul

    rem     Test for which pass this will be...
    if exist c:\wbssu2.txt goto third
    if exist c:\wbssu1.txt goto second

    echo Beginning ... let's get the current date and time... >> c:\wbssu1.txt
    date /T >> c:\wbssu1.txt
    time /T >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu1.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu1.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "SavRoam" >> c:\wbssu1.txt
    net stop "SavRoam" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu1.txt
    net stop "Symantec Event Manager" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu1.txt
    net stop "Symantec Settings Manager" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu1.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu1.txt
    net stop "Symantec AntiVirus" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Finished the main client uninstall group >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu1.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu1.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu1.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Uninstall Live Update >> c:\wbssu1.txt
    c:  >> c:\wbssu1.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu1.txt
    lsetup /U /q >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu1.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo Clean up directories >> c:\wbssu1.txt
    c: >> c:\wbssu1.txt
    cd \ >> c:\wbssu1.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu1.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu1.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu1.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu1.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu1.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu1.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    :finish
    echo Finished... >> c:\wbssu1.txt
    date /T >> c:\wbssu1.txt
    time /T >> c:\wbssu1.txt
    goto end

    :second
    echo Beginning ... let's get the current date and time... >> c:\wbssu2.txt
    date /T >> c:\wbssu2.txt
    time /T >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu2.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu2.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "SavRoam" >> c:\wbssu2.txt
    net stop "SavRoam" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu2.txt
    net stop "Symantec Event Manager" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu2.txt
    net stop "Symantec Settings Manager" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu2.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu2.txt
    net stop "Symantec AntiVirus" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Finished the main client uninstall group >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu2.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu2.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu2.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Uninstall Live Update >> c:\wbssu2.txt
    c:  >> c:\wbssu2.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu2.txt
    lsetup /U /q >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu2.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo Clean up directories >> c:\wbssu2.txt
    c: >> c:\wbssu2.txt
    cd \ >> c:\wbssu2.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu2.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu2.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu2.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu2.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu2.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu2.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    :finish
    echo Finished... >> c:\wbssu2.txt
    date /T >> c:\wbssu2.txt
    time /T >> c:\wbssu2.txt
    goto end

    :third
    echo Beginning ... let's get the current date and time... >> c:\wbssu3.txt
    date /T >> c:\wbssu3.txt
    time /T >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu3.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu3.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "SavRoam" >> c:\wbssu3.txt
    net stop "SavRoam" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu3.txt
    net stop "Symantec Event Manager" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu3.txt
    net stop "Symantec Settings Manager" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu3.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu3.txt
    net stop "Symantec AntiVirus" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Finished the main client uninstall group >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu3.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu3.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu3.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Uninstall Live Update >> c:\wbssu3.txt
    c:  >> c:\wbssu3.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu3.txt
    lsetup /U /q >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu3.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo Clean up directories >> c:\wbssu3.txt
    c: >> c:\wbssu3.txt
    cd \ >> c:\wbssu3.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu3.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu3.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu3.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu3.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu3.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu3.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    :finish
    echo Finished... >> c:\wbssu3.txt
    date /T >> c:\wbssu3.txt
    time /T >> c:\wbssu3.txt
    goto end

    :manual
    echo Beginning ... let's get the current date and time... >> c:\wbssu.txt
    date /T >> c:\wbssu.txt
    time /T >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "SavRoam" >> c:\wbssu.txt
    net stop "SavRoam" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu.txt
    net stop "Symantec Event Manager" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu.txt
    net stop "Symantec Settings Manager" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu.txt
    net stop "Symantec AntiVirus" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Finished the main client uninstall group >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Uninstall Live Update >> c:\wbssu.txt
    c:  >> c:\wbssu.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu.txt
    lsetup /U /q >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo Clean up directories >> c:\wbssu.txt
    c: >> c:\wbssu.txt
    cd \ >> c:\wbssu.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    :finish
    echo Finished... >> c:\wbssu.txt
    date /T >> c:\wbssu.txt
    time /T >> c:\wbssu.txt
    goto end

    :end
    echo Thank you for playing!

     

    • Marked as answer by Chris_Bailey Monday, August 31, 2009 2:02 PM
    Friday, August 28, 2009 6:55 PM

All replies

  • Hi,

     

    Thank you for your post.

     

    Based on my experience, before deploying Forefront on your client, you should remove other antivirus software first. If the forefront and Symantec coexist on the same client, there may be cause compatible issue.

     

    Regards,


    Nick Gu - MSFT
    • Proposed as answer by Nick Gu - MSFT Friday, August 28, 2009 8:21 AM
    Friday, August 28, 2009 8:21 AM
  • Chris, even though you have disabled Sym services the scanning executables are still running. Similarly to you I installed Forefront while Symantec was still installed, but on the next reboot I launched a BAT file that checked if Forefront was present and if so it ran through and uninstalled the Symantec code. 2 AV solutions running on one box spells trouble. This blog post and the associated comments helped me write the batch file in order to get Symantec uninstalled:

    http://it.toolbox.com/blogs/locutus/how-to-silently-and-remotely-remove-symantec-antivirus-14625

    Good luck.
    Friday, August 28, 2009 1:31 PM
  • This is what I've feared.  In our situation we have a very large deployment of symantec av (20,000+) and there are a ton of different versions.  We are just going to have to take the time to write an elborate script I assume.
    Friday, August 28, 2009 4:43 PM
  • Here's the batch file I used...

    @echo off
    goto meat
    rem     MET April 10, 2008 - WBS Symantec Uninstall Batch File
    rem     This will attempt to uninstall Symantec Corporate Anti-Virus from the current machine.
    rem     The echo statements create a self-documenting log file in wbssu.txt.
    rem     MET April 24, 2008 - Configuring to run 3 times maximum on one machine.
    rem     Using any command line character will skip the initial delay.
    rem
    rem     *** Skip Uninstall if Forefront doesn't exist!

    :meat
    cls
    echo.
    echo.
    echo Removing Symantec Corporate AntiVirus from your machine...
    echo   Please be patient, this can take 10 minutes...
    echo.
    echo.

    rem Test for command line switch of any sort and jump to manual.
    if %1x==x goto slow
    goto manual

    :slow
    rem     Test and skip if I've already done this 3 times...
    if exist c:\wbssu3.txt goto end

    rem     Test for existing Forefront installation before allowing NAV uninstall
    if not exist "%programfiles%\Microsoft Forefront\Client Security\Client\SSA\Results\*" goto end

    rem Wait 5 minutes for booting machine to stabilize.
    ping -n 301 127.0.0.1 > nul

    rem     Test for which pass this will be...
    if exist c:\wbssu2.txt goto third
    if exist c:\wbssu1.txt goto second

    echo Beginning ... let's get the current date and time... >> c:\wbssu1.txt
    date /T >> c:\wbssu1.txt
    time /T >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu1.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu1.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "SavRoam" >> c:\wbssu1.txt
    net stop "SavRoam" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu1.txt
    net stop "Symantec Event Manager" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu1.txt
    net stop "Symantec Settings Manager" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu1.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo. >> c:\wbssu1.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu1.txt
    net stop "Symantec AntiVirus" >> c:\wbssu1.txt
    echo Delay here 10 seconds.. >> c:\wbssu1.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Finished the main client uninstall group >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu1.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu1.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu1.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Uninstall Live Update >> c:\wbssu1.txt
    c:  >> c:\wbssu1.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu1.txt
    lsetup /U /q >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu1.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu1.txt

    echo Clean up directories >> c:\wbssu1.txt
    c: >> c:\wbssu1.txt
    cd \ >> c:\wbssu1.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu1.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu1.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu1.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu1.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu1.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu1.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt
    echo . >> c:\wbssu1.txt

    :finish
    echo Finished... >> c:\wbssu1.txt
    date /T >> c:\wbssu1.txt
    time /T >> c:\wbssu1.txt
    goto end

    :second
    echo Beginning ... let's get the current date and time... >> c:\wbssu2.txt
    date /T >> c:\wbssu2.txt
    time /T >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu2.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu2.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "SavRoam" >> c:\wbssu2.txt
    net stop "SavRoam" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu2.txt
    net stop "Symantec Event Manager" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu2.txt
    net stop "Symantec Settings Manager" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu2.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo. >> c:\wbssu2.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu2.txt
    net stop "Symantec AntiVirus" >> c:\wbssu2.txt
    echo Delay here 10 seconds.. >> c:\wbssu2.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Finished the main client uninstall group >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu2.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu2.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu2.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Uninstall Live Update >> c:\wbssu2.txt
    c:  >> c:\wbssu2.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu2.txt
    lsetup /U /q >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu2.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu2.txt

    echo Clean up directories >> c:\wbssu2.txt
    c: >> c:\wbssu2.txt
    cd \ >> c:\wbssu2.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu2.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu2.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu2.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu2.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu2.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu2.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt
    echo . >> c:\wbssu2.txt

    :finish
    echo Finished... >> c:\wbssu2.txt
    date /T >> c:\wbssu2.txt
    time /T >> c:\wbssu2.txt
    goto end

    :third
    echo Beginning ... let's get the current date and time... >> c:\wbssu3.txt
    date /T >> c:\wbssu3.txt
    time /T >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu3.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu3.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "SavRoam" >> c:\wbssu3.txt
    net stop "SavRoam" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu3.txt
    net stop "Symantec Event Manager" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu3.txt
    net stop "Symantec Settings Manager" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu3.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo. >> c:\wbssu3.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu3.txt
    net stop "Symantec AntiVirus" >> c:\wbssu3.txt
    echo Delay here 10 seconds.. >> c:\wbssu3.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Finished the main client uninstall group >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu3.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu3.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu3.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Uninstall Live Update >> c:\wbssu3.txt
    c:  >> c:\wbssu3.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu3.txt
    lsetup /U /q >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu3.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu3.txt

    echo Clean up directories >> c:\wbssu3.txt
    c: >> c:\wbssu3.txt
    cd \ >> c:\wbssu3.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu3.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu3.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu3.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu3.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu3.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu3.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt
    echo . >> c:\wbssu3.txt

    :finish
    echo Finished... >> c:\wbssu3.txt
    date /T >> c:\wbssu3.txt
    time /T >> c:\wbssu3.txt
    goto end

    :manual
    echo Beginning ... let's get the current date and time... >> c:\wbssu.txt
    date /T >> c:\wbssu.txt
    time /T >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Deleting Symantec Security Settings Keys... >> c:\wbssu.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /f >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Time to shutdown Symantec Services to help ensure the Uninstall is successful... >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "SavRoam" >> c:\wbssu.txt
    net stop "SavRoam" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec Event Manager" >> c:\wbssu.txt
    net stop "Symantec Event Manager" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec Settings Manager" >> c:\wbssu.txt
    net stop "Symantec Settings Manager" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu.txt
    net stop "Symantec AntiVirus Definition Watcher" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo. >> c:\wbssu.txt
    echo net stop "Symantec AntiVirus" >> c:\wbssu.txt
    net stop "Symantec AntiVirus" >> c:\wbssu.txt
    echo Delay here 10 seconds.. >> c:\wbssu.txt
    ping -n 10 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo Now we actually invoke the Installer service to Uninstall NAVCE 10.0.2 it's product key... >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {46B63F23-2B4A-4525-A827-688026BE5E40} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {BA4B71D1-898E-4306-AE87-8BA7A596F0ED} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {5a633ed0-e5d7-4d65-ab8d-53ed43510284} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {a011a1dc-7f1d-4ea8-bd11-0c5f9718e428} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {473af7d0-b864-4699-9974-df570c5b6dce} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {50e125d1-88e5-48ce-80ae-98ec9698e639} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {33CFCF98-F8D6-4549-B469-6F4295676D83} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {D75D48AF-E2D5-49EF-9571-EE7AFB6565B4} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {0698CECB-9072-47B1-AEA1-94CA350989B8} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x {E9FA3047-0b15-4e19-85ce-ee7fc6e60f99} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    MsiExec.exe /quiet /norestart /x  {848AC794-8B81-440A-81AE-6474337DB527} REMOVE=ALL PASSWORD=0 FORCE=1 >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Finished the main client uninstall group >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu.txt
    ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo Remove Remaining LanDesk registry keys... >> c:\wbssu.txt
    echo reg del HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu.txt
    reg delete HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6 /f >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Uninstall Live Update >> c:\wbssu.txt
    c:  >> c:\wbssu.txt
    cd \program files\symantec\liveupdate  >> c:\wbssu.txt
    lsetup /U /q >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    echo Delay here 2 minutes to allow the Uninstall time to process... >> c:\wbssu.txt
    echo Ping -n 120 127.0.0.1 > nul
    Ping -n 120 127.0.0.1 > nul
    echo . >> c:\wbssu.txt

    echo Clean up directories >> c:\wbssu.txt
    c: >> c:\wbssu.txt
    cd \ >> c:\wbssu.txt
    rmdir /s /q "C:\Program Files\Common Files\Symantec Shared\VirusDefs" >> c:\wbssu.txt
    rmdir /s /q "C:\Program Files\Symantec Antivirus" >> c:\wbssu.txt
    attrib -h "c:\documents and settings\all users\application data" >> c:\wbssu.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate" >> c:\wbssu.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Norton Antivirus Corporate Edition" >> c:\wbssu.txt
    rmdir /s /q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition" >> c:\wbssu.txt
    attrib +h "c:\documents and settings\all users\application data" >> c:\wbssu.txt
    echo . >> c:\wbssu.txt
    echo . >> c:\wbssu.txt

    :finish
    echo Finished... >> c:\wbssu.txt
    date /T >> c:\wbssu.txt
    time /T >> c:\wbssu.txt
    goto end

    :end
    echo Thank you for playing!

     

    • Marked as answer by Chris_Bailey Monday, August 31, 2009 2:02 PM
    Friday, August 28, 2009 6:55 PM
  • Chris!

    I use a startupscript that does it all. checks for all FCS prereqs and uninstalls any version of Symantec, McAfee (or whatever AV there might be). then installs FCS and updates the computer.

    Its based on the scripts you can download from www.codeplex.com (search for "Forefront", once there)

    If you whant you can contact me directly through my blog http://www.msforefront.com


    /Johan
    MCSE, forefront spec | www.msforefront.com
    Saturday, August 29, 2009 5:43 AM
  • Thanks Mike.  That's extremely helpful.

    Monday, August 31, 2009 1:48 PM
  • You could also look at a script that unloads the filter driver for Symantec which would effectively kill it's realtime protection

    "fltmc unload symevent"  would possibly do the trick although I'm not sure if that's Symantecs filter driver name offhand.
    CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde
    Monday, August 31, 2009 2:02 PM