Uninstall Comodo Endpoint Security and Comodo Endpoint security Manager (CESM) agents.

Download JSON Download Python

Ratings

Release Time

06/05/2017

Downloads

1320 times

Update Time

10/07/2024

Views

1637 times

Share-it:

Tags

Remote managment script C1 automation ITSM Procedures Security Windows command Comodo Client Security

Please use below script to,

This script will Uninstall the Comodo Endpoint Security and Comodo Endpoint security Manager (CESM) agents .

Run the script procedure as either "system user"

Procedure's Instructions

import os
import ctypes
from subprocess import PIPE, Popen
import time
import re
#import _winreg
try:
    import winreg as _winreg
except ImportError:
    try:
        import _winreg
    except ImportError:
        pass
import getpass
import socket
import os
import shutil
import time
import ssl
import time
import ctypes
try:
    import urllib.request as urllib2
except ImportError:
    try:
        import urllib2
    except ImportError:
        pass
import getpass
ESM = 'COMODO ESM Agent'
CES = 'COMODO Endpoint Security'
CCS = 'COMODO Client - Security'
#Version = "If CES has the name COMODO Client - Security add the version here"
Version = '8.3.0.180204'

class disable_file_system_redirection:
        _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
        _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
        def __enter__(self):
            self.old_value = ctypes.c_long()
            self.success = self._disable(ctypes.byref(self.old_value))
        def __exit__(self, type, value, traceback):
            if self.success:
                self._revert(self.old_value)

def ecmd(command, output=False):
    class disable_file_system_redirection:
        _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
        _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
        def __enter__(self):
            self.old_value = ctypes.c_long()
            self.success = self._disable(ctypes.byref(self.old_value))
        def __exit__(self, type, value, traceback):
            if self.success:
                self._revert(self.old_value)
    with disable_file_system_redirection():
        objt = Popen(command, shell = True, stdout = PIPE, stderr = PIPE)
        out, err = objt.communicate()
        ret=objt.returncode
    if not out:
        return ret
    else:
        return '%s\n%s'%(out, err)

def check():        
    return ecmd('wmic product get name,version,IdentifyingNumber| findstr /i /c:"COMODO Endpoint Security" /c:"COMODO ESM Agent" /c:"COMODO Client - Security"| sort')
guid=check()
def uninstall_cesm(find):    
    command=r'MsiExec.exe /X '+find+' /q'
    print (command)
    cesm=ecmd(command, True)
    print (cesm)
    time.sleep(90)
    inst=check()
    if inst:
        find=re.findall('{.*}\s\sCOMODO\sESM\sAgent',inst)
        if len(find) >0:        
            print ("Comodo ESM Agent is not uninstalled on Endpoint")
            print ("Please restart the computer and Try again")
            return(1)
    else :
        print ("Uninstallation is Successful")		
        return(0)

def uninstall_ces(find):    
    flag=r'reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\COMODO\CIS\ESM" /f'
    print (ecmd(flag,True))
    command=r'MsiExec.exe /X '+find+' /quiet REBOOT=ReallySuppress REMOVE=ALL'
    print (command)
    ces=ecmd(command, True)
    time.sleep(90)
    inst=check()
    if inst:
        find=re.findall('{.*}\s\sCOMODO\sEndpoint\sSecurity',inst)
        if len(find) >0:        
            print ("Comodo Endpoint Security is not uninstalled on Endpoint")
            print ("Please restart the computer and Try again")
            WrireRegcreate()
            print('reg key created created')
            writescript()
            print('script screated')
            print ('System will restart in 5 minutes')
            print (ecmd(r'shutdown.exe -r -t 300 /f ', True))
            return(1)
    else :
        print ("Uninstallation is Successful")
        return(0)

def uninstall_ces2(find):    
    flag=r'reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\COMODO\CIS\ESM" /f'
    print (ecmd(flag,True))
    command=r'MsiExec.exe /X '+find+' /quiet REBOOT=ReallySuppress REMOVE=ALL'
    print (command)
    ces=ecmd(command, True)
    time.sleep(90)
    inst=check()
    if inst:
        find=re.findall('{.*}\s\sCOMODO\sClient\s-\sSecurity ',inst)
        if len(find) >0:        
            print ("Comodo Client - Security is not uninstalled on Endpoint")
            print ("Please restart the computer and Try again")
            WrireRegcreate()
            print('reg key created created')
            writescript()
            print('script screated')
            print ('System will restart in 5 minutes')
            print (ecmd(r'shutdown.exe -r -t 300 /f ', True))
            return(1)
    else :
        print ("Uninstallation is Successful")
        return(0)

def WrireRegcreate():
    try:
        keyval="SYSTEM\\comodoinstall"
        try:
            reg = _winreg.ConnectRegistry(None, _winreg.HKEY_LOCAL_MACHINE)
            ok = _winreg.OpenKey(reg,keyval,0,_winreg.KEY_WOW64_32KEY | _winreg.KEY_READ)
            _winreg.CloseKey(ok)
            print("key present")
        except:
            print("key not found")
            key = _winreg.CreateKey(_winreg.HKEY_LOCAL_MACHINE,keyval)
            print("key created")
            _winreg.CloseKey(key)
        return True
    except WindowsError:
        return False

def WrireRegdelete():
    try:
        keyval="SYSTEM\\comodoinstall"
        try:
            reg = _winreg.ConnectRegistry(None, _winreg.HKEY_LOCAL_MACHINE)
            ok = _winreg.OpenKey(reg,keyval,0,_winreg.KEY_WOW64_32KEY | _winreg.KEY_READ)
            _winreg.CloseKey(ok)
            print("key present next delete key")
            key = _winreg.DeleteKey(_winreg.HKEY_LOCAL_MACHINE,keyval)
            print("delete key")
            _winreg.CloseKey(key)
        except:
            print("key not found")
        return True
    except WindowsError:
        return False

def writescript():
    f1 = open(os.path.expandvars("%SystemDrive%\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\test.vbs"), "w")
    f1.write('Set objFSO = CreateObject("Scripting.FileSystemObject")\r\n')
    f1.write('Const HKEY_LOCAL_MACHINE = &H80000002\r\n') 
    f1.write('strComputer = "."\r\n')
    f1.write('strKeyPath = "SYSTEM\\comodoinstall"\r\n')
    f1.write('Set objRegistry = GetObject("winmgmts:\\\\" & strComputer & "\\root\default:StdRegProv")\r\n')
    f1.write('DeleteSubkeys HKEY_LOCAL_MACHINE, strKeypath\r\n')
    f1.write('Sub DeleteSubkeys(HKEY_LOCAL_MACHINE, strKeyPath)\r\n')
    f1.write('    objRegistry.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubkeys\r\n')
    f1.write('    If IsArray(arrSubkeys) Then\r\n')
    f1.write('        For Each strSubkey In arrSubkeys\r\n')
    f1.write('            DeleteSubkeys HKEY_LOCAL_MACHINE, strKeyPath & "\\" & strSubkey\r\n')
    f1.write('        Next\r\n')
    f1.write('    End If\r\n')
    f1.write('    objRegistry.DeleteKey HKEY_LOCAL_MACHINE, strKeyPath\r\n')
    f1.write('End Sub\r\n')
    f1.write('strScript = Wscript.ScriptFullName\r\n')
    f1.write('objFSO.DeleteFile(strScript)\r\n')
    f1.close

def uninstallesmces():
    inst=check()
    print (inst)

if len(inst)>0:
        find=re.findall('{.*}\s\sCOMODO\sESM\sAgent ',inst)
        if len(find)>0:
                final=re.findall('{.*}',find[0])[0]            
                if len(final) >0:
                        print ("COMODO ESM Agent  is installed on Endpoint")
                        print ("Uninstalling has started ")
                        result1=uninstall_cesm(final)
        else:
            result1=-1

if len(inst)>0:
        find=re.findall('{.*}\s\sCOMODO\sEndpoint\sSecurity ',inst)
        if len(find)>0:
                final=re.findall('{.*}',find[0])[0]
                if len(final) >0:
                        print ("C0OMODO Endpoint Security  is installed on Endpoint")
                        print ("Uninstalling has started ")
                        result2=uninstall_ces(final)
        else:
            result2=-1

print (result1,result2)

if (result2==0):
        WrireRegcreate()
        print('reg key created created')
        writescript()
        print('script screated')
        print ('System will restart in 5 minutes')
        print (ecmd(r'shutdown.exe -r -t 300 /f', True))
   
    elif result1==-1 or result2==-1:     
        print ("ESM Agent and CES not detected")

def uninstallesmces2():
    inst=check()
    print (inst)

if len(inst)>0:
        find=re.findall('{.*}\s\sCOMODO\sClient\s-\sSecurity ',inst)
        if len(find)>0:
                final=re.findall('{.*}',find[0])[0]
                if len(final) >0:
                        print ("C0OMODO Client - Security  is installed on Endpoint")
                        print ("Uninstalling has started ")
                        result2=uninstall_ces2(final)
        else:
            result2=-1

print (result1,result2)

if (result2==0):
        WrireRegcreate()
        print('reg key created created')
        writescript()
        print('script screated')
        print ('System will restart in 5 minutes')
        print (ecmd(r'shutdown.exe -r -t 300 /f', True))    
    elif result1==-1 and result2==-1:     
        print ("ESM Agent and CES not detected")

def os_platform():
    true_platform = os.environ['PROCESSOR_ARCHITECTURE']
    try:
            true_platform = os.environ["PROCESSOR_ARCHITEW6432"]
    except KeyError:
            pass
            #true_platform not assigned to if this does not exist
    return true_platform

def Wrireferify():
    try:
        keyval="SYSTEM\\comodoinstall"
        reg = _winreg.ConnectRegistry(None, _winreg.HKEY_LOCAL_MACHINE)
        ok = _winreg.OpenKey(reg,keyval,0,_winreg.KEY_WOW64_32KEY | _winreg.KEY_READ)
        _winreg.CloseKey(ok)
        print("key present")
        return True
    except WindowsError:
        print("key not found")
        return False

final=os.popen('wmic product get name,version| findstr /i /c:"COMODO Endpoint Security" /c:"COMODO ESM Agent" /c:"COMODO Client - Security"| sort').read()
if (final.find(Version) != -1):
    if ((final.find(ESM) != -1) or (final.find(CES) != -1)):
        print('ESM or CES is present start uninstall cesm and ces')
        uninstallesmces()

elif ((final.find(CCS) != -1) and (final.find(Version) != -1)):
        print('ESM and CES is NOT present and CCS is present')
        uninstallesmces2()
        if Wrireferify() == True:
            print('CCS and key present request to remove')
            WrireRegdelete()
        else:
            print('CCS is present and the key is not present')
    elif ((final.find(CCS) != -1)):
          if Wrireferify() == True:
            print('CCS and key present request to remove')
            WrireRegdelete()
          else:
              print 'latest version if ccs has been successfully installed'
    else:
        print('ESM and CES is NOT present and CCS is NOT present')   
        
else:
    if ((final.find(ESM) != -1) or (final.find(CES) != -1)):
        print('ESM or CES is present start uninstall cesm and ces')
        uninstallesmces()
    elif ((final.find(CCS) != -1) and (final.find(Version) != -1)):
        print('ESM and CES is NOT present and CCS is present')
        uninstallesmces2()
        if Wrireferify() == True:
            print('CCS and key present request to remove')
            WrireRegdelete()
        else:
          print('CSS is present and the key is not present')

elif ((final.find(CCS) != -1)):
          if Wrireferify() == True:
            print('CCS and key present request to remove')
            WrireRegdelete()
          else:
              print 'latest version if ccs has been successfully installed'
    else:
        print('ESM and CES is NOT present and CCS is NOT present')

Comments

No Comments.

Uninstall Comodo Endpoint Security and Comodo Endpoint security Manager (CESM) agents.

Comments

Leave a Comment