Anti-Virus Upgrades (Autumn 2020)

Introduction

Imperial College has been using a combination of MalwareBytes and Symantec security software to protect our computers for many years. Changes in licensing costs have forced Imperial College to switch to another supplier for both of these services. Sophos combines the best of both into one package for a lower price.

We need to have Symantec Endpoint Protection removed from all DIDE computers by the end of October 2020.

We need to have MalwareBytes removed from all DIDE computers (desktops and laptops) by the end of November 2020.

The Procedure (overview)

These steps must be followed exactly and in sequence, and they apply to all operating systems. Only move on to the next step if the current one isn't applicable to you (e.g. you don't have MalwareBytes installed).

1. Uninstall MalwareBytes software:
   1. Uninstall MalwareBytes Anti-Exploit (if installed).
   2. Uninstall MalwareBytes Anti-Malware (if installed).
2. Uninstall Symantec Endpoint Protection.
3. Important: Restart your computer.
4. Install Sophos package (from the T:\IT folder on the DIDE network, or from this link).
5. Important: Restart your computer.

That's all there is to it. If all has gone well, you now have no yellow Symantec shield and instead have a blue and white Sophos shield.

The Procedure (specifics)

We assume that you are running a Windows 10 computer. If you're running a Mac you can uninstall MalwareBytes and Symantec by dragging the application icon into your recycle bin and restarting your Mac.

1. Press your Windows key to open the Windows 10 menu and type "Add or remove programs". Click on that menu item.
2. Scroll down to MalwareBytes and uninstall any items you see there (you may see the main client plus another called Anti-Exploit; uninstall both).
3. You will be prompted to restart your computer, but you don't need to until we've also uninstalled Symantec.
4. Scroll down further to Symantec and uninstall Symantec Endpoint Protection. If you also have their Encryption software don't uninstall that!
5. This will prompt you to restart your computer. You definitely have to restart now or the next step will break your computer.
6. Now that you've restarted your computer you can install the Sophos software. This will warn you that it will take about ten minutes and require a reboot. It will, and it does.
   1. Computer on the wired DIDE network: The installer is in the T:\IT\Anti-virus folder.
   2. Other computers: The installer link ishere.
7. Restart your computer when prompted to by the Sophos software.

If all has gone well, you now have no yellow Symantec shield and instead have a blue and white Sophos shield.