[Uninstall KES v11 + Agent v14 command line]

Indeed, without typos before converting to HEX, it works much better.

thank you very much

[Uninstall KES v11 + Agent v14 command line]

I also stopped the service before ordering

[Uninstall KES v11 + Agent v14 command line]

Hello THask.

Thanks for the  answer, but it does'nt work.

If I search in the registry, I find my agent :

Running your command, here is the LOG file:

=== Verbose logging started: 19/07/2023  08:41:38  Build type: SHIP UNICODE 5.00.10011.00  Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (14:80) [08:41:38:120]: Resetting cached policy values
MSI (c) (14:80) [08:41:38:121]: Machine policy value 'Debug' is 0
MSI (c) (14:80) [08:41:38:121]: ******* RunEngine:
           ******* Product: {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}
           ******* Action: 
           ******* CommandLine: **********
MSI (c) (14:80) [08:41:38:121]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (14:80) [08:41:38:121]: Grabbed execution mutex.
MSI (c) (14:80) [08:41:38:125]: Cloaking enabled.
MSI (c) (14:80) [08:41:38:125]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (14:80) [08:41:38:128]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (C0:B4) [08:41:38:139]: Running installation inside multi-package transaction {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}
MSI (s) (C0:B4) [08:41:38:139]: Grabbed execution mutex.
MSI (s) (C0:E8) [08:41:38:142]: Resetting cached policy values
MSI (s) (C0:E8) [08:41:38:142]: Machine policy value 'Debug' is 0
MSI (s) (C0:E8) [08:41:38:142]: ******* RunEngine:
           ******* Product: {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}
           ******* Action: 
           ******* CommandLine: **********
MSI (s) (C0:E8) [08:41:38:142]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (C0:E8) [08:41:38:142]: Setting cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:144]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 
MSI (s) (C0:E8) [08:41:38:148]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:148]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:148]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:148]: SRSetRestorePoint skipped for this transaction.
MSI (s) (C0:E8) [08:41:38:148]: Creating MSIHANDLE (1) of type 790542 for thread 7912
MSI (s) (C0:E8) [08:41:38:148]: MSCOREE not loaded loading copy from system32
MSI (s) (C0:E8) [08:41:38:155]: End dialog not enabled
MSI (s) (C0:E8) [08:41:38:155]: Original package ==> C:\WINDOWS\Installer\3c03.msi
MSI (s) (C0:E8) [08:41:38:156]: Package we're running from ==> C:\WINDOWS\Installer\3c03.msi
MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:157]: APPCOMPAT: Uninstall Flags override found.
MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:157]: APPCOMPAT: Uninstall VersionNT override found.
MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:157]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (s) (C0:E8) [08:41:38:158]: APPCOMPAT: looking for appcompat database entry with ProductCode '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}'.
MSI (s) (C0:E8) [08:41:38:158]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:161]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'DisablePatch' is 0
MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (C0:E8) [08:41:38:162]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (s) (C0:E8) [08:41:38:163]: APPCOMPAT: looking for appcompat database entry with ProductCode '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}'.
MSI (s) (C0:E8) [08:41:38:163]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (C0:E8) [08:41:38:163]: Transforms are not secure.
MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'c:\nag_uninst.log'.
MSI (s) (C0:E8) [08:41:38:163]: Command Line: REBOOT=ReallySuppress KLUNINSTPASSWD=xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00 REMOVE=ALL CURRENTDIRECTORY=c:\ CLIENTUILEVEL=3 CLIENTPROCESSID=12308 
MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B226E648-5478-4A8F-94E2-44534DA4CF90}'.
MSI (s) (C0:E8) [08:41:38:163]: Product Code passed to Engine.Initialize:           '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}'
MSI (s) (C0:E8) [08:41:38:163]: Product Code from property table before transforms: '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}'
MSI (s) (C0:E8) [08:41:38:163]: Product Code from property table after transforms:  '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}'
MSI (s) (C0:E8) [08:41:38:163]: Product registered: entering maintenance mode
MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:163]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:163]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is admin assigned: LocalSystem owns the publish key.
MSI (s) (C0:E8) [08:41:38:163]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is managed.
MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:163]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:163]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 
MSI (s) (C0:E8) [08:41:38:164]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:164]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:164]: Package name retrieved from configuration data: 'Kaspersky Network Agent.msi'
MSI (s) (C0:E8) [08:41:38:164]: Note: 1: 2262 2: AdminProperties 3: -2147287038 
MSI (s) (C0:E8) [08:41:38:164]: Machine policy value 'DisableMsi' is 0
MSI (s) (C0:E8) [08:41:38:164]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (C0:E8) [08:41:38:164]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (C0:E8) [08:41:38:164]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:164]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is admin assigned: LocalSystem owns the publish key.
MSI (s) (C0:E8) [08:41:38:164]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is managed.
MSI (s) (C0:E8) [08:41:38:164]: Running product '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}' with elevated privileges: Product is assigned.
MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding KLUNINSTPASSWD property. Its value is 'xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00'.
MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'c:\'.
MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '12308'.
MSI (s) (C0:E8) [08:41:38:164]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (C0:E8) [08:41:38:167]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is 'dc513c91447464429743e30782844539'.
MSI (s) (C0:E8) [08:41:38:167]: RESTART MANAGER: Session opened.
MSI (s) (C0:E8) [08:41:38:167]: TRANSFORMS property is now: 
MSI (s) (C0:E8) [08:41:38:167]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1036'.
MSI (s) (C0:E8) [08:41:38:167]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
MSI (s) (C0:E8) [08:41:38:170]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming
MSI (s) (C0:E8) [08:41:38:170]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Favorites
MSI (s) (C0:E8) [08:41:38:171]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (C0:E8) [08:41:38:172]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Documents
MSI (s) (C0:E8) [08:41:38:172]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (C0:E8) [08:41:38:173]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (C0:E8) [08:41:38:173]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (C0:E8) [08:41:38:174]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (C0:E8) [08:41:38:174]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (C0:E8) [08:41:38:174]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Local
MSI (s) (C0:E8) [08:41:38:175]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Pictures
MSI (s) (C0:E8) [08:41:38:176]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (C0:E8) [08:41:38:176]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (C0:E8) [08:41:38:177]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (C0:E8) [08:41:38:177]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (C0:E8) [08:41:38:178]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (C0:E8) [08:41:38:178]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (C0:E8) [08:41:38:179]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (C0:E8) [08:41:38:180]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (C0:E8) [08:41:38:180]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (C0:E8) [08:41:38:181]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Desktop
MSI (s) (C0:E8) [08:41:38:181]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (C0:E8) [08:41:38:182]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (s) (C0:E8) [08:41:38:182]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 
MSI (s) (C0:E8) [08:41:38:186]: MSI_LUA: Setting AdminUser property to 1 because the product is already installed managed and per-machine
MSI (s) (C0:E8) [08:41:38:186]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (C0:E8) [08:41:38:186]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5
MSI (s) (C0:E8) [08:41:38:186]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Service Informatique'.
MSI (s) (C0:E8) [08:41:38:186]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 
MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Eduyyyyyyyy'.
MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'.
MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\3c03.msi'.
MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\WINDOWS\Installer\3c03.msi'.
MSI (s) (C0:E8) [08:41:38:186]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (C0:E8) [08:41:38:186]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (C0:E8) [08:41:38:186]: Note: 1: 2205 2:  3: PatchPackage 
MSI (s) (C0:E8) [08:41:38:187]: Machine policy value 'DisableRollback' is 0
MSI (s) (C0:E8) [08:41:38:187]: User policy value 'DisableRollback' is 0
MSI (s) (C0:E8) [08:41:38:187]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Début de l'écriture dans le journal : 19/07/2023 08:41:38 ===
MSI (s) (C0:E8) [08:41:38:187]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 
MSI (s) (C0:E8) [08:41:38:187]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
MSI (s) (C0:E8) [08:41:38:187]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (C0:E8) [08:41:38:200]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (C0:E8) [08:41:38:200]: Doing action: INSTALL
Début de l'action 08:41:38 : INSTALL.
MSI (s) (C0:E8) [08:41:38:200]: Running ExecuteSequence
MSI (s) (C0:E8) [08:41:38:200]: Doing action: SetSetupPath
MSI (s) (C0:E8) [08:41:38:212]: Creating MSIHANDLE (2) of type 790542 for thread 7912
MSI (s) (C0:F0) [08:41:38:213]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI250D.tmp, Entrypoint: SetSetupPath
MSI (s) (C0:EC) [08:41:38:213]: Generating random cookie.
MSI (s) (C0:EC) [08:41:38:224]: Created Custom Action Server with PID 13004 (0x32CC).
MSI (s) (C0:E0) [08:41:38:253]: Running as a service.
MSI (s) (C0:E0) [08:41:38:261]: Hello, I'm your 32bit Impersonated custom action server.
MSI (s) (C0!C0) [08:41:38:358]: PROPERTY CHANGE: Adding SetupDir property. Its value is 'C:\WINDOWS\Installer\'.
MSI (s) (C0!C0) [08:41:38:358]: PROPERTY CHANGE: Adding SetupLog property. Its value is 'C:\WINDOWS\Installer\setup.log'.
MSI (s) (C0!C0) [08:41:38:358]: PROPERTY CHANGE: Adding SetupRep property. Its value is 'C:\WINDOWS\Installer\setup.rep'.
MSI (s) (C0:F0) [08:41:38:360]: Closing MSIHANDLE (2) of type 790542 for thread 7912
Début de l'action 08:41:38 : SetSetupPath.
MSI (s) (C0:E8) [08:41:38:362]: Doing action: AppSearch
Action terminé 08:41:38 : SetSetupPath. Valeur retournée 1.
Début de l'action 08:41:38 : AppSearch.
MSI (s) (C0:E8) [08:41:38:362]: PROPERTY CHANGE: Adding OS_SUPPORTS_UI property. Its value is 'C:\WINDOWS\explorer.exe'.
MSI (s) (C0:E8) [08:41:38:363]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SYSTEM\CurrentControlSet\Services\npf 3: 2 
MSI (s) (C0:E8) [08:41:38:363]: Doing action: FindRelatedProducts
Action terminé 08:41:38 : AppSearch. Valeur retournée 1.
MSI (s) (C0:E8) [08:41:38:363]: Skipping FindRelatedProducts action: not run in maintenance mode
Début de l'action 08:41:38 : FindRelatedProducts.
MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetNagentFoundProperty (condition is false)
MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetFirstInstall (condition is false)
MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetMajorUpgrade (condition is false)
MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetMinorUpgrade (condition is false)
MSI (s) (C0:E8) [08:41:38:363]: Doing action: CheckIfPatchServiceRunning
Action terminé 08:41:38 : FindRelatedProducts. Valeur retournée 0.
MSI (s) (C0:E8) [08:41:38:368]: Creating MSIHANDLE (3) of type 790542 for thread 7912
MSI (s) (C0:78) [08:41:38:368]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI25BA.tmp, Entrypoint: CheckIfPatchServiceRunningCA
MSI (s) (C0:78) [08:41:38:425]: Closing MSIHANDLE (3) of type 790542 for thread 7912
Début de l'action 08:41:38 : CheckIfPatchServiceRunning.
MSI (s) (C0:E8) [08:41:38:426]: Doing action: LaunchConditions
Action terminé 08:41:38 : CheckIfPatchServiceRunning. Valeur retournée 1.
Début de l'action 08:41:38 : LaunchConditions.
MSI (s) (C0:E8) [08:41:38:428]: Skipping action: CheckRequirements (condition is false)
MSI (s) (C0:E8) [08:41:38:428]: Doing action: GetUninstallPwd
Action terminé 08:41:38 : LaunchConditions. Valeur retournée 1.
MSI (s) (C0:E8) [08:41:38:432]: Creating MSIHANDLE (4) of type 790542 for thread 7912
MSI (s) (C0:74) [08:41:38:432]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI25FA.tmp, Entrypoint: GetUninstallPwd
MSI (s) (C0!EC) [08:41:38:491]: PROPERTY CHANGE: Adding PWDINSSHASH property. Its value is '7723368E00AA05E03E6D9F2398020396'.
MSI (s) (C0:74) [08:41:38:492]: Closing MSIHANDLE (4) of type 790542 for thread 7912
Début de l'action 08:41:38 : GetUninstallPwd.
MSI (s) (C0:E8) [08:41:38:495]: Skipping action: UpgradeUninstallPwdError_SilentMode (condition is false)
MSI (s) (C0:E8) [08:41:38:495]: Doing action: CheckUninstallPwd_SilentMode
Action terminé 08:41:38 : GetUninstallPwd. Valeur retournée 1.
MSI (s) (C0:E8) [08:41:38:498]: Creating MSIHANDLE (5) of type 790542 for thread 7912
MSI (s) (C0:B4) [08:41:38:498]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI2639.tmp, Entrypoint: CheckUninstallPwd_SilentMode
Début de l'action 08:41:38 : CheckUninstallPwd_SilentMode.
MSI (s) (C0:B4) [08:41:38:558]: Closing MSIHANDLE (5) of type 790542 for thread 7912
CustomAction CheckUninstallPwd_SilentMode returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action terminé 08:41:38 : CheckUninstallPwd_SilentMode. Valeur retournée 3.
Action terminé 08:41:38 : INSTALL. Valeur retournée 3.
Property(S): UpgradeCode = {B9518725-0B76-4793-A409-C6794442FB50}
Property(S): OS_SUPPORTS_UI = C:\WINDOWS\explorer.exe
Property(S): USESSL = 1
Property(S): OPENUDPPORT = 1
Property(S): KLNAG_PTCH_ALLOW_APPLY_NONAPROVED_PATCHES = 1
Property(S): LAUNCHPROGRAM = 1
Property(S): GATEWAYMODE = 0
Property(S): SERVERPORT = 14000
Property(S): SERVERSSLPORT = 13000
Property(S): UDPPORT = 15000
Property(S): WIXUI_INSTALLDIR = INSTALLDIR
Property(S): CERTSELECTION = GetOnFirstConnection
Property(S): PWDINSSHASH = 7723368E00AA056D9F2398020396AABBCCDD
Property(S): ERROR_CERT_NOT_SELECTED = Aucun certificat du Serveur d'administration n'est sélectionné.
Property(S): ERROR_EMPTY_PASSWORD = Le mot de passe de désinstallation n'est pas indiqué.
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): SystemFolder = C:\WINDOWS\SysWOW64\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): VersionNT = 603
Property(S): Installed = 00:00:00
Property(S): Manufacturer = Kaspersky
Property(S): ProductCode = {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}
Property(S): ProductLanguage = 1036
Property(S): ProductName = Agent d'administration de Kaspersky Security Center
Property(S): ProductVersion = 14.0.0.10902
Property(S): ERROR_BOOTSTRAPPER_NEEDS = Pour installer l'application, il faut lancer le fichier setup.exe.
Property(S): KSNPROXYSERVICE_NAME = ksnproxy
Property(S): KSNPROXYSERVICE_DISPLAY_NAME = Serveur proxy Kaspersky Security Network
Property(S): KSNPROXYSERVICE_DESCRIPTION = Le service KSN proxy retransforme les demandes adressées à Kaspersky Security Network et met en cache les réponses.
Property(S): UpdaterName = Composant de mise à jour de Kaspersky Security Center
Property(S): KLMON_SERVICE_DISPLAY = Surveillance du réseau
Property(S): KLNPF_SERVICE_DISPLAY = Pilote WinPcap
Property(S): NAGENTSERVICE_NAME = klnagent
Property(S): NAGENTSERVICE_DISPLAY_NAME = Agent d'administration de Kaspersky Security Center
Property(S): NAGENTSERVICE_DESCRIPTION = L'Agent d'administration assure l'interaction entre le Serveur d'administration et les applications Kaspersky installées sur les appareils.
Property(S): NSACSERVICE_NAME = klnsacwsrv
Property(S): NSACSERVICE_DISPLAY_NAME = Portail d'autorisation de Kaspersky
Property(S): NSACSERVICE_DESCRIPTION = Portail Internet d'authentification d'accès
Property(S): InstallerProject = Nagent
Property(S): KLNAG_KEL_NAME = Journal des événements Kaspersky
Property(S): KLAdmins = Administrateurs de Kaspersky Security Center 14
Property(S): KLOperators = Opérateurs de Kaspersky Security Center 14
Property(S): START_MENU_FLDR_OLD_NAME = Kaspersky Security Center
Property(S): START_MENU_FLDR_ACTUAL_NAME = Kaspersky Security Center
Property(S): DEDICATED_ACCOUNT_DESCRIPTION = Compte utilisateur désigné pour l'Agent d'administration.
Property(S): DEDICATED_SERVICE_ACCOUNT_FULL_NAME = Compte utilisateur désigné pour l'Agent d'administration
Property(S): ALLUSERS = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPHELPLINK = https://support.kaspersky.com/fr
Property(S): ARPURLUPDATEINFO = https://www.kaspersky.fr/downloads
Property(S): ARPPRODUCTICON = setup2.ico
Property(S): ARPHELPTELEPHONE = http://support.kaspersky.com/support/business_support_contacts
Property(S): INSTALLLEVEL = 5
Property(S): LANGID = fr
Property(S): ProductName_GEN = Agent d'administration de Kaspersky Security Center
Property(S): ProductName_ACC = Agent d'administration de Kaspersky Security Center
Property(S): ProductName_DAT = Agent d'administration de Kaspersky Security Center
Property(S): ProductName_ART = Agent d'administration de Kaspersky Security Center
Property(S): ProductName_GEN_ART = Agent d'administration de Kaspersky Security Center
Property(S): ProductName_ACC_ART = Agent d'administration de Kaspersky Security Center
Property(S): ProductName_DAT_ART = Agent d'administration de Kaspersky Security Center
Property(S): MSIENFORCEUPGRADECOMPONENTRULES = 1
Property(S): MSIRESTARTMANAGERCONTROL = DisableShutdown
Property(S): REINSTALLMODE = vomus
Property(S): ERROR_REBOOT_NEEDED = Vous devez redémarrer l'appareil pour terminer l'installation.
Property(S): INT_PRODUCT_NAME = 1103
Property(S): INT_PRODUCT_VER = 1.0.0.0
Property(S): ALLOWNETBIOS = 1
Property(S): COMPRESSTRAFFIC = 1
Property(S): ERROR_SUCCESS = 0
Property(S): ERROR_INCOMPATIBLE_OS = Impossible d'installer l'application. Le système d'exploitation %1 n'est pas pris en charge.
Property(S): ERROR_INCOMPATIBLE_INSTALLER = Impossible d'installer les applications. La version actuelle de Windows Installer %1 n'est pas prise en charge par cette application.
Property(S): ERROR_PRIVILEGES = Impossible d'installer l'application. Le compte utilisateur %1 ne possède pas de privilèges nécessaires.
Property(S): ERROR_NEWER_VERSION = L'application ne peut pas être installée. Une version plus récente de l'Agent d'administration (%1) a été détectée.
Property(S): ERROR_AK_NAGENT_FOUND = L'Agent d'administration est déjà installé comme partie intégrante du Serveur d'administration.
Property(S): ERROR_FATAL = Une erreur inattendue est apparue : %1.
Property(S): ERROR_NAGENT_REG = Une erreur inattendue est apparue à l'enregistrement de l'Agent d'administration.
Property(S): ERROR_STOP_SERVICE = Échec de l'arrêt du service %1. Essayez de l'arrêter manuellement, puis redémarrez l'installation.
Property(S): ERROR_STOP_SERVICES = Impossible d'arrêter certains services de l'Agent d'administration : %1. Essayez de l'arrêter manuellement, puis redémarrez l'installation.
Property(S): ERROR_B2B_UPGRADE = L'Agent d'administration a été installé à l'origine en mode B2B Cloud. Vous ne pouvez le mettre à niveau qu'en mode B2B Cloud uniquement.
Property(S): ERROR_NOTB2B_UPGRADE = L'Agent d'administration n'a pas été installé à l'origine en mode B2B Cloud. Vous ne pouvez pas le mettre à niveau en mode B2B Cloud.
Property(S): ERROR_NAGENT_INFO = Impossible d'obtenir les informations sur l'instance de l'Agent d'administration installée. Vous pouvez essayer de la désinstaller manuellement, puis de relancer l'installation. Tous les paramètres de l'Agent d'administration seront perdus.
Property(S): ERROR_NAGENT_BACKUP = Impossible de sauvegarder les données de l'instance d'Agent d'administration installée. Assurez-vous que les chemins d'accès %1 et %2 sont accessibles, et que l'espace libre pour la sauvegarde est suffisant.
Property(S): ERROR_NAGENT_JUNCTION = Assurez-vous que le chemin %1 est un lien symbolique vers le dossier %2, et non un chemin d'accès physique.
Property(S): ERROR_NAGENT_KESENCRYPT = Les disques ou les fichiers de cet appareil sont chiffrés. Pour installer l'Agent d'administration sous Kaspersky Security Center Cloud Console, vous devez d'abord déchiffrer l'appareil et désactiver le chiffrement des données pour cet appareil en utilisant la stratégie Kaspersky Endpoint Security for Windows.
Property(S): ERROR_NAGENT_MIGRATIONONPWD = Upgrade of Network Agent with changing installation mode is not supported if it is password-protected to uninstall.
Property(S): DefaultUIFont = WixUI_Font_Normal
Property(S): DefaultUITitle = Agent d'administration de Kaspersky Security Center
Property(S): ErrorDialog = ErrorDlg
Property(S): ERROR_GATEWAY_ADDRESS_EMPTY = Aucune adresse de passerelle de connexion n'est indiquée.
Property(S): ERROR_GATEWAY_ADDRESS_INVALID = L'adresse de la passerelle contient des caractères inadmissibles.
Property(S): ERROR_GATEWAY_ADDRESS_INVALID_FMT = L'adresse de la passerelle contient des caractères non valides. Les caractères non autorisés sont : %s
Property(S): ERROR_SERVER_ADDRESS_EMPTY = Nom du Serveur d'administration n'est pas indiqué.
Property(S): ERROR_SERVER_ADDRESS_INVALID = Le nom du Serveur d'administration contient des caractères non valides.
Property(S): ERROR_SERVER_PORT_EMPTY = Le nom du port du Serveur d'administration n'est pas indiqué.
Property(S): ERROR_SERVER_PORT_INVALID = Numéro de port du Serveur d'administration non valide. La valeur doit être comprise entre 1 et 65 535.
Property(S): ERROR_SERVER_SSL_PORT_EMPTY = Le nom du port SSL du Serveur d'administration n'est pas indiqué.
Property(S): ERROR_SERVER_SSL_PORT_INVALID = Numéro de port SSL du serveur d'administration non valide. La valeur doit être comprise entre 1 et 65 535.
Property(S): ERROR_SERVER_PORT_EQ_SSL_PORT = Le port et le port SSL du Serveur d'administration doivent être différents.
Property(S): ERROR_SERVER_UDP_PORT_EMPTY = Le port UDP de l'Agent d'administration n'est pas indiqué.
Property(S): ERROR_SERVER_UDP_PORT_INVALID = Le numéro du port UDP de l'agent d'administration est incorrect. La valeur doit être comprise entre 1 et 65 535.
Property(S): ERROR_SERVER_TAGLENGTH_TOOLONG = La longueur du tag ne peut pas être supérieure à 255 caractères.
Property(S): ERROR_SERVER_TAGNAME_WRONGSYMBOL = Les caractères suivants ne sont pas autorisés dans un nom de tag : "*<>?\:|
Property(S): ERROR_PROXY_ADDRESS_EMPTY = L'adresse du serveur proxy n'est pas définie.
Property(S): ERROR_PROXY_ADDRESS_INVALID = Le nom du serveur proxy contient des caractères interdits.
Property(S): ERROR_PROXY_PORT_EMPTY = Le port du serveur proxy n'est pas défini.
Property(S): ERROR_PROXY_PORT_INVALID = Le numéro du port du serveur proxy est incorrect. La valeur doit être comprise entre 1 et 65535.
Property(S): ERROR_PROXY_ACCOUNT_EMPTY = Le nom du compte utilisateur n'est pas indiqué.
Property(S): ERROR_PROXY_ACCOUNT_INVALID = Nom du compte utilisateur incorrect.
Property(S): ERROR_WRONG_UNINST_PWD = Mot de passe de désinstallation incorrect.
Property(S): ERROR_EULA_ISNOT_ACCEPTED = Le Contrat de licence utilisateur final n'a pas été accepté.
Property(S): ERROR_PPOLICY_ISNOT_ACCEPTED = La Politique de confidentialité n'est pas acceptée.
Property(S): WARNING_OLD_NPF_DRIVER = La bibliothèque WinPcap n'a pas été installée parce qu'une version antérieure de la bibliothèque WinPcap a été détectée sur l'appareil.
Property(S): SecureCustomProperties = FOUND_NEWER_PRODUCT;FOUNDNAGENT_LESS_V6;FOUNDNAGENT_V6;FOUNDNAGENT_V6_MSI;FOUNDNAGENT_V8;FOUNDNAGENT_V9;FOUNDSERVER_LESS_V9;FOUNDSERVER_V9
Property(S): MsiHiddenProperties = ExtractNagentBases;RollbackExtractNagentBases
Property(S): MsiLogFileLocation = c:\nag_uninst.log
Property(S): PackageCode = {B226E648-5478-4A8F-94E2-44534DA4CF90}
Property(S): ProductState = 5
Property(S): ProductToBeRegistered = 1
Property(S): REBOOT = ReallySuppress
Property(S): KLUNINSTPASSWD=xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00
Property(S): REMOVE = ALL
Property(S): CURRENTDIRECTORY = c:\
Property(S): CLIENTUILEVEL = 3
Property(S): CLIENTPROCESSID = 12308
Property(S): MsiRestartManagerSessionKey = dc513c91447464429743e30782844539
Property(S): PRODUCTLANGUAGE = 1036
Property(S): VersionDatabase = 300
Property(S): VersionMsi = 5.00
Property(S): VersionNT64 = 603
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 1
Property(S): WindowsFolder = C:\WINDOWS\
Property(S): WindowsVolume = C:\
Property(S): System64Folder = C:\WINDOWS\system32\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\adminyp\AppData\Local\Temp\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\adminyp\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\adminyp\Favorites\
Property(S): NetHoodFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\adminyp\Documents\
Property(S): PrintHoodFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): LocalAppDataFolder = C:\Users\adminyp\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\adminyp\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\WINDOWS\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 7862
Property(S): VirtualMemory = 4858
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = AdminYP
Property(S): UserSID = S-1-5-21-2507263096-1611601412-3754082935-8008
Property(S): UserLanguageID = 1036
Property(S): ComputerName = EDU008065
Property(S): SystemLanguageID = 1036
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 23
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 08:41:38
Property(S): Date = 19/07/2023
Property(S): MsiNetAssemblySupport = 4.8.9032.0
Property(S): MsiWin32AssemblySupport = 6.3.22621.963
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = Service Informatique
Property(S): COMPANYNAME = Educ@Rennes
Property(S): DATABASE = C:\WINDOWS\Installer\3c03.msi
Property(S): OriginalDatabase = C:\WINDOWS\Installer\3c03.msi
Property(S): UILevel = 2
Property(S): Preselected = 1
Property(S): ACTION = INSTALL
Property(S): SetupDir = C:\WINDOWS\Installer\
Property(S): SetupLog = C:\WINDOWS\Installer\setup.log
Property(S): SetupRep = C:\WINDOWS\Installer\setup.rep
MSI (s) (C0:E8) [08:41:38:582]: Note: 1: 1725 
MSI (s) (C0:E8) [08:41:38:582]: Application : Agent d'administration de Kaspersky Security Center -- La suppression a échoué.

MSI (s) (C0:E8) [08:41:38:582]: Windows Installer a supprimé le produit. Nom du produit : Agent d'administration de Kaspersky Security Center. Version du produit : 14.0.0.10902. Langue du produit : 1036. Fabricant : Kaspersky. Réussite de la suppression ou état d’erreur : 1603.

MSI (s) (C0:E8) [08:41:38:582]: Closing MSIHANDLE (1) of type 790542 for thread 7912
MSI (s) (C0:E8) [08:41:38:584]: Deferring clean up of packages/files, if any exist
MSI (s) (C0:E8) [08:41:38:584]: MainEngineThread is returning 1603
MSI (s) (C0:B4) [08:41:38:586]: RESTART MANAGER: Session closed.
MSI (s) (C0:B4) [08:41:38:586]: No System Restore sequence number for this installation.
=== Fin de l'écriture dans le journal : 19/07/2023 08:41:38 ===
MSI (s) (C0:B4) [08:41:38:586]: User policy value 'DisableRollback' is 0
MSI (s) (C0:B4) [08:41:38:586]: Machine policy value 'DisableRollback' is 0
MSI (s) (C0:B4) [08:41:38:587]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (C0:B4) [08:41:38:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (C0:B4) [08:41:38:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (C0:B4) [08:41:38:587]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (C0:B4) [08:41:38:587]: Destroying RemoteAPI object.
MSI (s) (C0:EC) [08:41:38:587]: Custom Action Manager thread ending.
MSI (c) (14:80) [08:41:38:588]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (14:80) [08:41:38:589]: MainEngineThread is returning 1603
=== Verbose logging stopped: 19/07/2023  08:41:38 ===

It shows several errors and no uninstallation

I tried to reboot, with no results.

If you have an idea ...

Thanks

[Uninstall KES v11 + Agent v14 command line]

Hello everyone.

I need to uninstall Kaspersky EndPoint Security v 11.5.0.590 + Kaspersky Security Center v 14.0.0.10902 administration agent via Microsoft Endpoint Configuration Manager.

Use the command :

msiexec.exe /x {xxxxxxx3EB} /qn KLLOGIN=yyyy KLPASSWD=zzzz 

Kaspersky uninstalls just fine, but my administration agent is password-protected, which I have, but I can't find the argument to add to the command :

MsiExec.exe /x {wwwww12F5B} /qn

Does anyone have an idea to help me out?

Thanks a lot.