Workstation still thinks Cisco AMP is installed

[josh.goodin]

Amp service would not start.  I removed AMP from the Workstation. Tried to reinstall it after a reboot.  Now it thinks I am trying to upgrade from an old version.  What needs to be clean off so that it does not think an old version of Amp is installed on this workstation?

[Matthew Franks]

Josh,

When you uninstall there is an option that asks if you plan to install AMP (Secure Endpoint) again. You probably selected yes, so the older files weren't deleted.  Check for a 6.3.1 folder in the C:/Program Files/Cisco/AMP directory. If it exists, delete it and try again. Otherwise, there might be a lingering registry entry that you'll have to delete. If you have trouble finding it, TAC can help if you open a case.

Thanks,

Matt

[npetrele]

Revouninstaller is great for this sort of thing. After you install whatever version (it doesn't matter), use Revo to uninstall it. It scans the registry and folders for leftover registry values and files and lets you delete them. Then you have a clean system and can install the version you want. 

[ghhfgh]

I have the same problem too now. Took same steps to get to this point. I deleted all the registries under AMP, Cisco, Endpoint and its still giving me the same message. Was anyone able to resolve this?

[ccieexpert]

you may want to open a TAC case so that they might further ideas of what is lingering..

[kailandrew60]

---

@josh.goodin wrote:

Amp service would not start.  I removed AMP from the Workstation. Tried to reinstall it after a reboot.  Now it thinks I am trying to upgrade from an old version.  What needs to be clean off so that it does not think an old version of Amp is installed on this workstation? family run plumbing

---

You need to clean up leftover files and registry entries from the previous AMP installation. First, uninstall AMP completely. Then delete any remaining AMP-related folders in Program Files and AppData. Open Registry Editor (regedit), search for and delete AMP-related keys under HKEY_LOCAL_MACHINE\SOFTWARE and HKEY_CURRENT_USER\SOFTWARE. Reboot the workstation before reinstalling AMP.

[David Janulik]

First you should use msi installer to uninstall and log any remnant information. This location might vary. The complete msi help invoke with /? option

msiexec.exe /uninstall "C:\Program Files\Cisco\AMP\8.4.3.30374\SecureClientUI.msi" /l+v* "C:\ProgramData\Cisco\Cisco Secure Client\SecureClientUI.msi.log"

Very last thing is to open SR case with TAC to supply with uninstall script. Share the msi log beforehand, please.

[David Janulik]

Hello,

we don't want to disclose the Windows system registry location. The standard way if you run in race condition is via SR ticket. Tac can help you with Powershell script (verified).

Thanks

David