Uninstall CESM agent ,CES, and Install CCS

Download JSON Download Python

Ratings

(0)

Release Time

04/05/2018

Downloads

904 times

Update Time

11/20/2024

Views

981 times

Share-it:

Tags

No results found.

Description
Screen Shots

This is the Auto-remediation Script which is used to Uninstall CESM agent, CES (comodo endpoint security), and install CCS

You need to Run the Script auto-remediation alert on Run below procedure:(refer the below image)

Note:
Please Do not Use the Script as Normal Procedure

This script is only for the following Custom monitoring script:

https://scripts.comodo.com/frontend/web/topic/monitoring-the-presence-of-cesm-agent-and-ces-in-the-endpoint

Run the script As System User

Note:

#Do you want to show Installation notes
showwarn="yes" ## Provide "yes" or "no" if showwarn="yes" Installation notes will appear.

# Do you want to enable MSI Installation log?
msiLogs = "yes" ## Provide "yes" or "no" if showwarn="no" MSI Installation log will appear.

Procedure's Instructions

########################################################################################################################
# Do you want to show Installation notes
showwarn = "yes"
# Do you want to enable MSI Installation log?
msiLogs = "yes"
########################################################################################################################
from subprocess import PIPE, Popen
import re
import ssl
import time
import ctypes
import datetime
import os

try:
    import winreg as _winreg
except ImportError:
    try:
        import _winreg
    except ImportError:
        pass

try:
    import urllib.request as urllib2
except ImportError:
    try:
        import urllib2
    except ImportError:
        pass

ESM = 'COMODO ESM Agent'
CES = 'COMODO Endpoint Security'
CCS = 'COMODO Client - Security'

# Version = "If CES has the name COMODO Client - Security add the version here"
Version = '8.3.0.180204'

msiLogSwitch = ""

if msiLogs is "yes":
    OsPath = r"C:\Program Files (x86)"
    if os.path.exists(OsPath):
        msiLogSwitch = r' /lv*x "C:\Program Files (x86)\ITarian\Endpoint Manager\rmmlogs\CES_Install_MSI ' + str(
            datetime.datetime.now().strftime("%d-%m-%y %H-%M-%S")) + '.log"'
    else:
        msiLogSwitch = r' /lv*x "C:\Program Files\ITarian\Endpoint Manager\rmmlogs\CES_Install_MSI ' + str(
            datetime.datetime.now().strftime("%d-%m-%y %H-%M-%S")) + '.log"'

class disable_file_system_redirection:
    _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
    _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection

def __enter__(self):
        self.old_value = ctypes.c_long()
        self.success = self._disable(ctypes.byref(self.old_value))

def __exit__(self, type, value, traceback):
        if self.success:
            self._revert(self.old_value)

def ecmd(command, output=False):
    with disable_file_system_redirection():
        objt = Popen(command, shell=True, stdout=PIPE, stderr=PIPE)
        out, err = objt.communicate()
        ret = objt.returncode
    if not out:
        return ret
    else:
        return '%s\n%s' % (out, err)

def check():
    return ecmd(
        'wmic product get name,version,IdentifyingNumber| findstr /i /c:"COMODO Endpoint Security" /c:"COMODO ESM Agent" /c:"COMODO Client - Security"| sort')

guid = check()

def uninstall_cesm(find):
    command = r'MsiExec.exe /X ' + find + ' /q'
    print(command)
    cesm = ecmd(command, True)
    print(cesm)
    time.sleep(300)
    inst = check()
    if inst:
        find = re.findall('{.*}\s\sCOMODO\sESM\sAgent', inst)
        if len(find) > 0:
            print("Comodo ESM Agent is not uninstalled on Endpoint")
            print("Please restart the computer and Try again")
            return (1)
    else:
        print("Uninstall is successful")
        return (0)

def uninstall_ces(find):
    flag = r'reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\COMODO\CIS\ESM" /f'
    print(ecmd(flag, True))
    command = r'MsiExec.exe /X ' + find + ' /quiet REBOOT=ReallySuppress REMOVE=ALL'
    print(command)
    time.sleep(300)
    inst = check()
    if inst:
        find = re.findall('{.*}\s\sCOMODO\sEndpoint\sSecurity', inst)
        if len(find) > 0:
            print("Comodo Endpoint Security is not uninstalled on Endpoint")
            print("Please restart the computer and try again")
            WrireRegcreate()
            print('Reg key created')
            writescript()
            print('Script created')
            print('System will restart in 5 minutes')
            print(ecmd(r'shutdown.exe -r -t 300 /f ', True))
            return (1)
    else:
        print("Uninstall is successful")
        return (0)

def uninstall_ces2(find):
    flag = r'reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\COMODO\CIS\ESM" /f'
    print(ecmd(flag, True))
    command = r'MsiExec.exe /X ' + find + ' /quiet REBOOT=ReallySuppress REMOVE=ALL'
    print(command)
    time.sleep(300)
    inst = check()
    if inst:
        find = re.findall('{.*}\s\sCOMODO\sClient\s-\sSecurity ', inst)
        if len(find) > 0:
            print("Comodo Client - Security is not uninstalled on Endpoint")
            print("Please restart the computer and Try again")
            WrireRegcreate()
            print('Register key was created')
            writescript()
            print('script screated')
            print('System will restart in 5 minutes')
            print(ecmd(r'shutdown.exe -r -t 300 /f ', True))
            return (1)
    else:
        print("Uninstallation is Successful")
        return (0)

def WrireRegcreate():
    try:
        keyval = "SYSTEM\\comodoinstall"
        try:
            reg = _winreg.ConnectRegistry(None, _winreg.HKEY_LOCAL_MACHINE)
            ok = _winreg.OpenKey(reg, keyval, 0, _winreg.KEY_WOW64_32KEY | _winreg.KEY_READ)
            _winreg.CloseKey(ok)
            print("Register key is present")
        except:
            print("Register key was not found")
            key = _winreg.CreateKey(_winreg.HKEY_LOCAL_MACHINE, keyval)
            print("Register key was created")
            _winreg.CloseKey(key)
        return True
    except WindowsError:
        return False

def WrireRegdelete():
    try:
        keyval = "SYSTEM\\comodoinstall"
        try:
            reg = _winreg.ConnectRegistry(None, _winreg.HKEY_LOCAL_MACHINE)
            ok = _winreg.OpenKey(reg, keyval, 0, _winreg.KEY_WOW64_32KEY | _winreg.KEY_READ)
            _winreg.CloseKey(ok)
            print("key present next delete key")
            key = _winreg.DeleteKey(_winreg.HKEY_LOCAL_MACHINE, keyval)
            print("delete key")
            _winreg.CloseKey(key)
        except:
            print("key not found")
        return True
    except WindowsError:
        return False

def writescript():
    f1 = open(
        os.path.expandvars("%SystemDrive%\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\test.vbs"),
        "w")
    f1.write('Set objFSO = CreateObject("Scripting.FileSystemObject")\r\n')
    f1.write('Const HKEY_LOCAL_MACHINE = &H80000002\r\n')
    f1.write('strComputer = "."\r\n')
    f1.write('strKeyPath = "SYSTEM\\comodoinstall"\r\n')
    f1.write('Set objRegistry = GetObject("winmgmts:\\\\" & strComputer & "\\root\default:StdRegProv")\r\n')
    f1.write('DeleteSubkeys HKEY_LOCAL_MACHINE, strKeypath\r\n')
    f1.write('Sub DeleteSubkeys(HKEY_LOCAL_MACHINE, strKeyPath)\r\n')
    f1.write('    objRegistry.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubkeys\r\n')
    f1.write('    If IsArray(arrSubkeys) Then\r\n')
    f1.write('        For Each strSubkey In arrSubkeys\r\n')
    f1.write('            DeleteSubkeys HKEY_LOCAL_MACHINE, strKeyPath & "\\" & strSubkey\r\n')
    f1.write('        Next\r\n')
    f1.write('    End If\r\n')
    f1.write('    objRegistry.DeleteKey HKEY_LOCAL_MACHINE, strKeyPath\r\n')
    f1.write('End Sub\r\n')
    f1.write('strScript = Wscript.ScriptFullName\r\n')
    f1.write('objFSO.DeleteFile(strScript)\r\n')
    f1.close()

def uninstallesmces():
    inst = check()
    print(inst)
    result1 = 0
    result2 = 0

if len(inst) > 0:
        find = re.findall('{.*}\s\sCOMODO\sESM\sAgent ', inst)
        if len(find) > 0:
            final = re.findall('{.*}', find[0])[0]
            if len(final) > 0:
                print("COMODO ESM Agent  is installed on Endpoint")
                print("Uninstalling has started ")
                result1 = uninstall_cesm(final)
        else:
            result1 = -1

if len(inst) > 0:
        find = re.findall('{.*}\s\sCOMODO\sEndpoint\sSecurity ', inst)
        if len(find) > 0:
            final = re.findall('{.*}', find[0])[0]
            if len(final) > 0:
                print("C0OMODO Endpoint Security  is installed on Endpoint")
                print("Uninstalling has started ")
                result2 = uninstall_ces(final)
        else:
            result2 = -1

print(result1, result2)

if result2 == 0:
        WrireRegcreate()
        print('Register key was created')
        writescript()
        print('script screated')
        print('System will restart in 5 minutes')
        print(ecmd(r'shutdown.exe -r -t 300 /f', True))

elif result1 == -1 or result2 == -1:
        print("ESM Agent and CES not detected")

def uninstallesmces2():
    inst = check()
    print(inst)
    result1 = 0
    result2 = 0

if len(inst) > 0:
        find = re.findall('{.*}\s\sCOMODO\sClient\s-\sSecurity ', inst)
        if len(find) > 0:
            final = re.findall('{.*}', find[0])[0]
            if len(final) > 0:
                print("Comodo Client - Security  is installed on Endpoint")
                print("Uninstalling has started ")
                result2 = uninstall_ces2(final)
        else:
            result2 = -1

print(result1, result2)

def os_platform():
    true_platform = os.environ['PROCESSOR_ARCHITECTURE']
    try:
        true_platform = os.environ["PROCESSOR_ARCHITEW6432"]
    except KeyError:
        pass
        # true_platform not assigned to if this does not exist
    return true_platform

def Download1(Download_URL, Download_Path):
    print('Downloading required Comodo Client Security')
    fileName = Download_URL.split('/')[-1]
    DownTo = os.path.join(Download_Path, fileName)
    try:
        context = ssl._create_unverified_context()
        f = urllib2.urlopen(Download_URL, context=context)
    except:
        f = urllib2.urlopen(Download_URL)
    data = f.read()
    with open(DownTo, "wb") as code:
        code.write(data)
    time.sleep(300)
    if os.path.isfile(DownTo):
        print('Comodo Client security has been downloaded successfully here ' + DownTo)
    else:
        print("File wasn't downloaded successfully")
        exit(code=1)
    return DownTo

def installccs():
    archi = os_platform()
    if archi == "x86":
        print("System type is 32 bit")
        Download_URL = "https://download.comodo.com/itsm/CIS_x86.msi"
    else:
        print("System type is 64 bit")
        Download_URL = "https://download.comodo.com/itsm/CIS_x64.msi"
    Download_Path = os.environ['PROGRAMDATA']
    path = Download1(Download_URL, Download_Path)
    if showwarn is "yes":
        print(ecmd(r'msg * /time:30 CCS installation is started. Do not restart PC until next anouncement.', True))

if archi == "x86":
        command1 = 'msiexec /i  "' + path + '"  /quiet REBOOT=ReallySuppress CESMCONTEXT=1 MAKE_CESM_DEFAULT_CONFIG=1 CES_SANDBOX=1 CES_FIREWALL=1 CES_ANTIVIRUS=1 INSTALLFIREWALL=1' + msiLogSwitch
        if ecmd(command1, True) == 3010:
            pass
        else:
            exit(code = 1)
            raise Exception("Failed to install CCS. Please check MSI logs for details:%s" % msiLogSwitch[7:])
    else:
        command1 = 'msiexec /i  "' + path + '"  /quiet REBOOT=ReallySuppress CESMCONTEXT=1 MAKE_CESM_DEFAULT_CONFIG=1 CES_SANDBOX=1 CES_FIREWALL=1 CES_ANTIVIRUS=1 INSTALLFIREWALL=1' + msiLogSwitch
        if ecmd(command1, True) == 3010:
            pass
        else:
            exit(code=1)
            raise Exception("Failed to install CCS. Please check MSI logs for details:%s" % msiLogSwitch[7:])

print("Waiting until ITSM agent will synchronize with CCS")
    time.sleep(300)
    print("Removing unnecessary installation files")
    os.remove(path)
    print('Comodo Client Security was installed successfully')
    WrireRegcreate()
    print('Reg key was created')
    print('System will restart in 5 minutes, this is required to finish the installation')
    print(ecmd(r'shutdown.exe -r -t 300 /f ', True))

def Wrireferify():
    try:
        keyval = "SYSTEM\\comodoinstall"
        reg = _winreg.ConnectRegistry(None, _winreg.HKEY_LOCAL_MACHINE)
        ok = _winreg.OpenKey(reg, keyval, 0, _winreg.KEY_WOW64_32KEY | _winreg.KEY_READ)
        _winreg.CloseKey(ok)
        print("key present")
        return True
    except WindowsError:
        print("key not found")
        return False

final = os.popen(
    'wmic product get name,version| findstr /i /c:"COMODO Endpoint Security" /c:"COMODO ESM Agent" /c:"COMODO Client - Security"| sort').read()
if final.find(Version) != -1:
    if (final.find(ESM) != -1) or (final.find(CES) != -1):
        print('ESM or CES is present... Start uninstallation of CESM and CES')
        uninstallesmces()

elif (final.find(CCS) != -1) and (final.find(Version) != -1):
        print('ESM and CES is NOT present and CCS is present')
        uninstallesmces2()
        if Wrireferify() == True:
            print('CSS and register key are present... Requesting to remove')
            WrireRegdelete()
        else:
            print('CSS is present and the register key is not present')
    elif final.find(CCS) != -1:
        if Wrireferify() == True:
            print('CSS and register key are present... Requesting to remove')
            WrireRegdelete()
        else:
            print('latest version of ccs has been successfully installed')
    else:
        print('ESM and CES is NOT present and CCS is NOT present')
        print('Starting the installation process for  CCS')
        installccs()

else:
    if (final.find(ESM) != -1) or (final.find(CES) != -1):
        print('ESM or CES is present... Starting uninstallation of CESM and CES')
        uninstallesmces()
    elif (final.find(CCS) != -1) and (final.find(Version) != -1):
        print('ESM and CES are NOT present and CCS is present')
        uninstallesmces2()
        if Wrireferify():
            print('CSS and register key present, requesting to remove the register key')
            WrireRegdelete()
        else:
            print('CSS is present and the register key is not present')

elif final.find(CCS) != -1:
        if Wrireferify() == True:
            print('CSS and register key present, requesting to remove the register key')
            WrireRegdelete()
        else:
            print('Latest version of the CCS has been successfully installed')
    else:
        print('ESM and CES are NOT present and CCS is NOT present')
        print('Starting the installation process for  Comodo Client Security')
        installccs()

Comments

No Comments.

Uninstall CESM agent ,CES, and Install CCS

Comments

Leave a Comment