Manually uninstall ESET Remote Administrator components (6.x)

Issue

  • Unable to uninstall ESET Remote Administrator component using standard uninstall methods
  • These instructions can be used to uninstall the following ESET products:

    • ERA Agent (6.x)

    • ERA Server (6.x)

    • ERA Proxy (6.x)

Solution

End of support for version 6.4 and 6.5 of ESET Remote Administrator / MDM

ESET Remote Administrator version 6.5 is currently in Limited Support status and will soon be in Basic Support status. It is expected to reach End of Life status in December 2020.

ESET Remote Administrator version 6.4 is currently in basic support status and is expected to reach End of Life status in December 2019.

The MDM functionality in ESET Remote Administrator version 6 is in Basic Support status as of April 11, 2019. After this date, MDM version 6 will no longer be available for download.

Use standard methods first

We strongly recommend that you use the:

Only perform manual uninstallation of components if these methods fail.

To uninstall ESET Remote Administrator components, you should first run the ERA All-in-one installer that you used during ERA installation and select Uninstall Remote Administrator components. See the following Online Help topic for more information:

Manually uninstall ERA components

Complete the appropriate steps for your ERA version

  1. Open an Administrative Command Prompt. Click Start → All Programs → Accessories, right-click Command Prompt and then click Run as administrator. If prompted, click Yes in the User Account Control window.

    Type the following commands in to the command prompt to delete the services:
    • For the ERA Agent: sc delete EraAgentSvc
    • For the ERA Server: sc delete EraServerSvc
    • For the ERA Proxy: sc delete EraProxySvc
       
  2. Erase the following directories and all of the files inside the folders (these addresses are default and may be different on your system). Adjust the address according to the component you are uninstalling (Agent / Server / Proxy).
  • C:Program FilesESETRemoteAdministratorAgent

    If you changed the Destination Folder during the installation

    You could have changed this address during the installation. You can retrieve this information from the Registry Editor.

    1. Run regedit and navigate to the registry key HKEY_LOCAL_MACHINESOFTWAREESETRemoteAdministratorAgentCurrentVersionInfo
      (Adjust the address according to the component you are uninstalling: Agent / Server / Proxy)
       
    2. The paths are in values (on the right side of the window) AddDataDir and InstallDir
       
  • C:ProgramDataESETRemoteAdministratorAgent

The directory ProgramData is hidden by default, you may need to enable Show hidden files under Control Panel → Folder Options → View. 
 

  1. Open regedit (press the Windows key + R, type regedit and click OK), navigate to HKEY_LOCAL_MACHINESOFTWAREESETRemoteAdministrator and delete the appropriate registry key of the component you want to uninstall.

    Use caution when editing the registry

    Make only the edits specified below to the system registry. Unnecessary changes to the registry can negatively affect system performance.

Determine your UUID using wmic (recommended)

  1. Open the Command Prompt (CMD).
  2. Run the code below in the Commnad Prompt. Substitute the string Agent for Proxy or Server if you are unisntalling that component.

    WMIC Product WHERE 'Name LIKE “ESET%Agent”' GET Name, IdentifyingNumber
  3. Save the IdentifyingNumber from the response for next steps, where you use it as UUID. Continue with Remove matching registry entries.

Determine your UUID manually (alternative)

  1. Determine your installation UUID using the following method. In regedit look for string according to the product you want to uninstall (first click on the "Computer" icon in the Registry Editor window and then press Ctrl + F, as seen on the Figure 1)
  • Agent - 786A20824144DB1449FA500C3A98D88D
  • Proxy - F9CA8E30D2213F845B3D8CD400830207
  • Server - 6BBB27714D4D80B49B1A3516C272C035


Figure 1
Click the image to view larger in new window

 

  1. After finding the registry key (the left side of the window, as seen in Figure 2) with the searched code, look on the right side of the window and there should be a value with your UUID. The format of UUID is like 0C152732BE4C9304C928EF074263969D.


Figure 2
Click the image to view larger in new window

  1. Now transform this UUID into the Product Code. The transformation process is as following:

Reverse first 8 characters 0C152732237251C0  
 
Reverse next 4 characters BE4CC4EB  
 
Reverse next 4 characters 93044039
 
Reverse next 2 characters C99C  
 
Reverse next 2 characters 2882  
 
Reverse next 2 characters EFFE  
 
Reverse next 2 characters 0770  
 
Reverse next 2 characters 4224

Reverse next 2 characters 6336
 
Reverse next 2 characters 9669
 
Reverse next 2 characters 9DD9

In the end, add the dashes so the value looks like: 237251C0-C4EB-4039-9C82-FE70243669D9
This is your Product Code. Keep both the UUID and your Product Code in a text file so it can be used in next steps.

Remove matching registry entries

  1. Look up all entries that contain the UUID. Delete registry keys (the left side of the window, as shown in Figure 3) that contain the UUID or their name is the UUID. That there can be over 50 registry keys to delete. Be cautious, in this step do NOT delete anything inside these keys:   
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerFolders
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUFHARP
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall


Figure 3
Click the image to view larger in new window

  1. In this step, we will use your Product Code

    Use caution when editing the registry

    • Following registry keys must NOT be deleted!
      • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerFolders
      • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUFHARP
    • Never delete keys with many sub-keys inside

In the two registry keys mentioned above, you have to look for your Product Code. Inside, delete only the value with Product Code (the right side of the Registry Editor, right-click on the value and click Delete, as seen in Figure 4). Never delete these keys.


Figure 4
Click the image to view larger in new window

 

  1. In the registry key:    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall

Find the sub-key with your Product Code and delete that subkey, as seen in Figure 5.


Figure 5
Click the image to view larger in new window


The ERA component should now be uninstalled.

If you are still unable to resolve your issue, please email ESET Technical Support.

Additional resources