cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
pryan67
Champion Sweeper II
We moved from Symantec to Sophos recently, and the pilot machines are still reporting that Symantec is installed, although it's been removed. It is being detected using WMI. What is the easiest way to prevent this. We want to roll this out to all users that have Symantec, but since they're all being seen as having it installed, it's difficult to know which have been done and which haven't.

1 REPLY 1
cycleheat
Engaged Sweeper III
Try the steps here https://community.spiceworks.com/how_to/2031-check-the-wmi-repository-for-an-antivirus-product-that-is-not-installed


The thread also has a script to remove all AV info from WMI, it'll rebuild on the next reboot.