March 30, 2012 - Warren Held

Windows Reports Anti-Virus Product Installed After Uninstalling or Multiple Anti-Virus Products

Sometimes if an anti-virus product doesn’t uninstall properly Windows and the Windows Security Center will report that the anti-virus software is still on the machine.  This can cause issues when you try to install a different anti-virus product, or in my case if you’re using a remote management and monitoring product such as N-able’s N-central to push anti-virus to the user machines.  Follow the following steps to remove the Anti-Virus entry from the Windows Security Center namespace.  If that does not clear up the issue then there might be registry entries left over that you will have to remove.

Step 1:

Go to start and run wbemtest.

Step 2:
Click connect.

Step 3:
In the namespace box type “root\SecurityCenter2” (for Windows 7 and Vista) or “root\SecurityCenter” (for Windows XP).  Without the quotes of course.  Click on Connect.

Step 4:

Click “Enum Instances” and type AntiVirusProduct. Click ok.

Step 5:

If you have no anti-virus products installed and you want to remove the entry, then click on the instance and click delete.  If you have an anti-virus product installed but Windows is reporting you have more than one installed then you will have to double click on each instance to view the details to figure out which instance GUID correlates to which anti-virus product.  As you can see I only have one anti-virus instance registered and in the details view I can see the displayName property is ESET NOD32 Antivirus 5. (Which I highly recommend)

Windows 7 AntiVirus / Security Center / Windows 7 / Windows Vista / Windows XP /