@echo off
@Echo This script is to help Computer Science Users to uninstall sophos from 
@Echo windows 10/11. It will uninstall the main sophos components so that a 
@echo different anti-virus product can be used. 
@echo For this script to succeed you must:
@echo * run this script as an administrator  
@echo * check that Tamper protection within Sophos is disable
@echo For further details open  https://tsg.cs.ucl.ac.uk/Software
@echo This script uses two passes to uninstall sophos.
@echo Once finished you can either configure MS Defender or install F-Secure.
@echo Some error messages may be displayed whilst this script runs and can 
@echo be ignored. To abort press [CTRL] C or
pause 
rem stop services - order is important
rem 
net stop "sophos autoupdate service" 
rem 
net stop "Sophos Remote Management System"
net stop "Sophos Network Threat Protection"
net stop "Sophos Client Firewall"
net stop "Sophos Anti-Virus"
net stop "Sophos AutoUpdate"
net stop "Sophos Diagnostic Utility"
rem server 
net stop "Sophos Exploit Prevention"
net stop "Sophos CryptoGuard"
rem 
net stop "Sophos Clean"
net stop "Sophos Patch Agent"
net stop "Sophos Endpoint Defense"
rem 
rem uninstall Sophos System Protection
MsiExec.exe /X{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6} /passive /norestart
rem uninstall sophos anti virus
MsiExec.exe /X{65323B2D-83D4-470D-A209-D769DB30BBDB} /passive /norestart
rem uninstall Sophos AutoUpdate
MsiExec.exe /X{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54} /passive /norestart
@echo Thats the first pass, to carry on with second pass
pause
rem remove stubbon components
"C:\Program Files\Sophos\Endpoint Defense\SEDuninstall.exe"
rem x64 components
MsiExec.exe /X{644ADF05-0B2E-452C-B720-3CF1580A9368} /passive /norestart
rem  
MsiExec.exe /X{723D5504-CE98-4785-AF5F-E91E250086B3} /passive /promptrestart
rem done
@echo Script finished. Now open https://tsg.cs.ucl.ac.uk/Software and 
@echo select the Sophos Anti-virus link to check that your machine is protected.
pause