1. Kill and Uninstall Multiple Running Anti-Virus Programs using Kaseya Developed By: Jasmine English Advisor : Dr. S. Masoud Sadjadi School of Computing and Information Sciences Florida International University jengl003@fiu.edu http://www.cs.fiu.edu/~sadjadi/

2. Agenda Problem and Motivation Solution Behind the Scene Customizing the Solution Disclaimer Progress Report

3. Problem and Motivation: Computers often have more than one anti-virus application installed and running simultaneously. Anti-virus applications, by themselves, use a significant amount of RAM and CPU resources – multiple anti-virus applications running at once can render a computer inoperable.

4. Solution Using the Agent Procedures feature of Kaseya, a system administrator can monitor a set of computers and remove excessive anti-virus programs while keeping a preferred anti-virus program intact, updated and running.

5. Behind the Scene 1.A procedure traverses computer’s list of installed programs and collects information about what anti- virus programs are installed. 2.Deploy preferred anti-virus program if it is not already on the system. 3.Remove all other anti-virus programs. 4.Deploy monitoring procedure to report new installations of anti-virus programs. 5.Repeat 1 & 2 when monitor reports new anti-virus installation.

6. Customizing the Solution If recognizing anti-virus program through WMI, Windows XP requires a different namespace than Windows Vista and 7. Otherwise, no further customization needed.

7. Disclaimer Windows XP, Windows Vista and Windows 7 are supported. Mac OS X, Linux distributions and other Windows platforms are NOT supported by this solution. Anti-Virus software not recognized by Kaseya or the WMI are NOT supported for automatic removal.

8. Progress Report Drafted procedure. Need to know how Kaseya (or WMI) recognizes programs as anti-virus programs.