Software uninstallation from remote Microsoft Windows assets

Remote uninstallation via the SMB protocol

How it works

  1. Executable TSDUninstallService.exe (an agent) and UninstallScript.dst (uninstallation settings) are uploaded to the administrator’s shared folder admin$ on the remote computer.
  2. TSD’s main unit connects to the Service manager on the target PC, installs the agent as a service and starts it.
  3. The agent creates a custom hidden desktop where the uninstallation process will be performed.
  4. The agent loads the file containing uninstallation settings, runs software uninstallation, then waits for final software to be uninstalled and, after sending the results to the main unit, stops.
  5. The agent service is uninstalled, and all uninstallation files are deleted.

No traces of uninstallation will remain on the target PC after the scan is complete.

Requirements for the target machine

CPU

As recommended for the installed OS

RAM

As recommended for the installed OS

HDD Space

~2,5 Mb

TCP ports

139, 445

Services

Server
Remote Procedure Call (RPC)
Remote Registry

Resources

ipc$
admin$

Protocols

SMB
TCP/IP

Windows version

XP Pro, Vista, 7, 8, 8.1, 10, Server 2003/2008/2012 (R2 included)/2016

Contents