SES UWP app shows another security product that is not installed managing Anti-Malware

Products

• Endpoint Security Complete

Issue/Introduction

The Symantec Endpoint Security UWP app (Cloud Connect Defense) shows another security product managing Anti-Malware. The other security product is not installed any longer.

Still showing old security agent when running anti malware, have to remove manually

Cause

The SES UWP queries WMI to discover what product is managing antimalware. A previously removed product has left behind the WMI keys in the registry after removal.

Resolution

Find the leftover product code for the uninstalled product

• Open powershell and run: Get-WmiObject -Namespace "root/SecurityCenter2" -Query "Select * from AntivirusProduct"
• Make a note of the product guid(s) of the removed antimalware product

Remove the leftover product code with WBEMTEST

• open WBEMTEST
• Click the "Connect..." button
• Enter:
• root/securitycenter2
• Click the "Connect" button
• Click the "Query..." button
• Enter:
• SELECT * from Antivirusproduct
• Select the entry that shows the GUID(s) found using the above powershell script and click "DELETE".