Created
December 31, 2018 06:22
-
-
Save nhalstead/4ed68a54c32a102b763b8437af186301 to your computer and use it in GitHub Desktop.
This will Remove AVG from the Local Machine.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
REM Cleanup | |
del /F /Q C:\Toolkit\* |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
REM Setup for AVG Removal | |
mkdir C:\Toolkit | |
cd /d C:\Toolkit && certutil.exe -urlcache -split -f "https://install.avcdn.net/avg/iavs9x/avgclear.exe" avgclear.exe | |
cd /d C:\Toolkit && echo C:\Toolkit\avgclear.exe /norestart /skipask /silent >>avgclear.log > "avgclear.bat" | |
cd /d C:\Toolkit && echo Dim WinScriptHost > "avgclear.vbs" | |
cd /d C:\Toolkit && echo Set WinScriptHost = CreateObject("WScript.Shell") >> "avgclear.vbs" | |
cd /d C:\Toolkit && echo WinScriptHost.Run Chr(34) ^& ^"avgclear.bat^" ^& Chr(34), 0 >> "avgclear.vbs" | |
cd /d C:\Toolkit && echo Set WinScriptHost = Nothing >> "avgclear.vbs" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
REM Start | |
cd /d C:\Toolkit && "avgclear.vbs" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
REM Monitor Command | |
tasklist /FI "IMAGENAME EQ avgclear.exe" |
You most likely are getting the popup because you are running it on the machine as a user, this script is designed to be running from an ssh like interface in windows, In this specific use case, I was at a support desk executing this script via an RMM tool that had an execution limit but does not have any UI elements that are shown to the user as it would run in the background.
As far as it's still showing the dialog, what part is being shown, a few parts could be showing this, the better information provided could help determine what needs to be changed.
Hi Noah,
This was run in an elevated command prompt from administrator account, how
should it be run?
…On Wed., Jan. 22, 2020, 3:20 p.m. Noah Halstead, ***@***.***> wrote:
You most likely are getting the popup because you are running it on the
machine as a user, this script is designed to be running from an ssh like
interface in windows, In this specific use case, I was at a support desk
executing this script via an RMM tool that had an execution limit but does
not have any UI elements that are shown to the user as it would run in the
background.
As far as it's still showing the dialog, what part is being shown, a few
parts could be showing this, the better information provided could help
determine what needs to be changed.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
<https://gist.github.com/4ed68a54c32a102b763b8437af186301?email_source=notifications&email_token=AMEF4ERBN6LYB7L2RIYVMNTQ7CTAZA5CNFSM4KKI7MS2YY3PNVWWK3TUL52HS4DFVNDWS43UINXW23LFNZ2KUY3PNVWWK3TUL5UWJTQAGAHRA#gistcomment-3149584>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AMEF4ETQ7QKZHKUYKJSNQADQ7CTAZANCNFSM4KKI7MSQ>
.
--
This email or any attachments may contain confidential or legally
privileged information intended for the sole use of the addressees. Any
use, redistribution, disclosure, or reproduction of this information,
except as intended, is prohibited. If you received this email in error,
please notify the sender and remove all copies of the message, including
any attachments.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi there, this is an awesome script, however, the popup is still presented, any way around that?