Anyone know of a nice way of removing Sophos Anti-Virus?

joseph.smith

Losing MSP aren't playing ball with the tamper protection password

tanderson

@Joseph

Sophos KB shows this:

You may be able to script the changes to the registry without having to go into advanced options. Once the registry changes have been made you can schedule a reboot and then run an uninstall script to remove Sophos all together.

tanderson

@Joseph

Once Tamper Protection is off:

Uninstall Sophos Endpoint using a command prompt

To uninstall Sophos Endpoint, do as follows:

1. Open a command prompt as an administrator.
2. Enter cd C:\Program Files\Sophos\Sophos Endpoint Agent\
3. Run SophosUninstall.exe with any required parameters.
   • --quiet runs the uninstaller silently.
   • The LanguageID is the standard decimal or hexadecimal code for the language. Make sure you use the same language that was used for installation.

nina

@tanderson 🙌🏻

joseph.smith

@kain

https://community.atera.com/discussion/comment/776#Comment_776

dyoder

@Joseph an easier solution might be the ESET AV Remover https://help.eset.com/AVRemover/1/en-US/

I've used it in the past to remove other AV products and it usually does a pretty good job. It looks like Sophos Home / Endpoint Agent / Endpoint Security and Control are all supported. But if that doesn't work, you might need to go with @tanderson's solution.

joseph.smith

Thanks @dyoder didn't know ESET have an AV remover! Will give it a shot!

DaveWebster

I have found the best solution to be fire.

A little here a little there and the AV goes away, there is a slight side effect though.

Quote often its sets of the fire alarm. Sophos gives off very toxic fumes when burnt.

Hope that helps.

Dave.