IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: How to uninstall the CB Response sensor via command line (MSI Installation media only)

EDR: How to uninstall the CB Response sensor via command line (MSI Installation media only)

Environment

  • EDR Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Objective

  • How to uninstall the EDR sensor via command line.
  • This is only applicable to EDR sensors which were installed with the the 'MSI' package and not the 'EXE' package.

Resolution

  1. Open an elevated command prompt.
  2. Open regedit.exe
    • Navigate to the following registry hive to retrieve the 'MSIUninstallString'
      • HKEY_LOCAL_MACHINE\SOFTWARE\CarbonBlack
  3. Double click on the 'MSIUninstallString' and copy the value.
  4. Paste the value in the elevated command prompt and press enter.

Additional Notes

  • Alternatively you can query the 'MSIUninstallString' via the same command prompt by executing the following command.
    • reg query "HKEY_LOCAL_MACHINE\SOFTWARE\CarbonBlack" | findstr "MSIUninstallString"

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
1953
Contributors