How to remotely uninstall software?

There’s a lot of times when you just want to uninstall a piece of software without interrupting the end user, but unfortunately there isn’t an easy, out of the box way to do it.

To uninstall software on a local machine without any user interaction, you would do something like this:
msiexec.exe /norestart /qn /x {2902F983-B4C1-44BA-B85D-5C6D52E2C441}

The last part, after /x is the GUID of installed software. To find out the guid on remote software, download this script from here and run this command:
cscript /B SwInventory.vbs RemotePC > RemotePC.txt

Open RemotePC.txt and look for GUID.

Next you need PsExec from SysInternals. This tool will allow you to run commands on the remote computer.

Once you find out the GUID of the software that you need to uninstall, you can make a batch file with msiexec.exe command on it. Like:
msiexec.exe /norestart /qn /x {2902F983-B4C1-44BA-B85D-5C6D52E2C441} and name it uninstall.bat

If you need to uninstall more than one software, just create new lines with new GUIDs, example:
msiexec.exe /norestart /qn /x {2902F983-B4C1-44BA-B85D-5C6D52E2C441}
msiexec.exe /norestart /qn /x {18455581-E099-4BA8-BC6B-F34B2F06600C}

Next you run PsExec tool and copy and run the batch file to the remote with command:
psexec remotepc -c uninstall.bat

You will need to run cmd as an administrator in order to be able to execute remote commands.

If the software uninstalled successfully, you will get error code 0, if not, it will say something like “this action is only valid for products that are currently installed.”

This will be useful when you need to uninstall same software from multiple computers. An antivirus product is a good example if you are upgrading to another one.

After system repair, Windows Activation Wizard won’t run

http://social.technet.microsoft.com/Forums/en/itproxpsp/thread/b991ce21-db5b-46eb-8c9b-f8d4aa14a35a?prof=required

HERE’S THE FIX…

Download Internet Explorer 8 and Hotfix KB946501, burn them to disc

Hotfix KB946501 http://support.microsoft.com/default.aspx/kb/946501
Internet Explorer 8 http://www.microsoft.com/windows/internet-explorer/default.aspx

Start your PC and repeatedly hit F8 to get the safe mode menu.

Choose safe mode with command prompt only (if you are unable to enter safe mode otherwise)

When the command prompt appears type “explorer”

Should load the Windows GUI behind the cmd window

Install the KB946501 hotfix from your disc (may not need if you’re not multicore)

Install IE8

Reboot normally in to Windows, you should be able to activate as usual.

Apparently the activation Window is dependant upon IE.

Hope this works, let me know.

New malware redirects all major search engine results to Gala search

If you are being redirected to galasearch every time you search for something it may be because this shitworm planted few manual hosts on the hosts file.

First thing it does is hide the host file, so by going to C:WINDOWSSYSTEM32DRIVERSETC you will not see hosts at all. To show hosts, click on Tools from any open folder, and then go to Folder Options, switch to View tab and check “show hiden files and folders” and also uncheck “hide extension…” and ” hide protected operating system files”. Continue reading “New malware redirects all major search engine results to Gala search”

How did I get infected with Advanced Virus Remover?

As you may have heard by now there is a lot of malware around acting as antivirus.  A client emailed me and told me that she was infected with “Advanced Virus Remover” and she noticed that when she was using store locator page at acmoore.com, which is an Arts and Crafts store. First I didn’t think that was possible. Usually you get infected from a site that is not known or popular. I had to check it myself, and what do you know, she was right!

Continue reading “How did I get infected with Advanced Virus Remover?”

Auto connect and authenticate to a mapped drive on Windows XP

Lately Windows XP Pro and Home is loosing connectivity to the mapped drive or sometime the user has to double click on on Z drive to initiate the authentication process. In some cases the “remember password” check box is not there either. Which means you have to type username and password every time you reboot. I have looked around for a solution and haven’t been able to find anything yet.

In some cases it has been asking for authentication even if i give permissions to “Everyone” on the local and shared permissions. If you run the network setup wizard and enable file and print sharing at the end it may work. It didn’t work on every case for me, very random.

Continue reading “Auto connect and authenticate to a mapped drive on Windows XP”