Uninstalling AIR agents

There are several ways to uninstall the AIR agent from endpoints and these include using the AIR console or working on the actual endpoint.
It is important to understand that you should only remove the agent if you have no intention of revisiting the endpoint for further investigations. If you do need to do so, then a fresh agent deployment will be needed.
From the Endpoints window in the console it is possible to select one or multiple endpoints from an Organization and choose to either 'Uninstall agent' or 'Uninstall agent and purge console data'.
​
 'Uninstall agent' or 'Uninstall agent and purge console data.
The 'Uninstall agent' will remove the AIR application from any selected endpoints.
The 'Uninstall agent and purge console data' option will remove the AIR application from the selected endpoints and delete the data saved from the endpoints for the console. All associated Tasks (eg; Timeline) will also be deleted from the console. Data saved to Remote Storage, and locally saved data on the endpoint will remain intact. interACT or normal asset management tools can be used to remove this data.
Uninstalling on Windows endpoints
Graphical User Interface (GUI) Method
To gracefully uninstall the Agent application from your Windows operating system, follow these steps:
1.Navigate to the Control Panel.
2.Access the "Add/Remove Programs" feature.
3.Locate and select the Binalyze AIR Agent application from the list.
4.Choose the option to uninstall.
Command Prompt Method
You can also uninstall the Agent application using the command prompt with the following methods:
Using Product Code
To uninstall via the product code, execute the following steps:
Identify the product code of the Agent using PowerShell:
get-wmiobject Win32_Product | Sort-Object -Property Name | Format-Table IdentifyingNumber, Name, LocalPackage -AutoSize
Identifying the product code of the Agent using Powershell
Copy the identified product code.
Uninstall the Agent using msiexec:
msiexec /x "{84662419-2FEB-48D0-AFBF-C174D871A3CA}"
Using Original MSI File
If you possess the original MSI file of the Agent, you can proceed as follows:
msiexec /x "C:\Users\hio\Downloads\AIR.Agent_2.25.0_air-dev.binalyze.com_44_4ce0820f14f6461a_amd64_.msi"
In either method, you can efficiently uninstall the Agent application from your system.
Uninstalling on Linux endpoints
On Ubuntu and Debian
1.Open a terminal window.
2.To uninstall the binalyze-air-agent package, use the following command:
sudo apt remove binalyze-air-agent
This command will uninstall the package.
On CentOS, Fedora, Redhat and similar distributions (using dnf)
1.Open a terminal window.
2.To uninstall the binalyze-air-agent package, run the following command:
sudo dnf remove binalyze-air-agent
This command will uninstall the package.
Uninstalling on macOS endpoints
To initiate the uninstallation process for the Agent via the Terminal on macOS, execute the following command:
sudo /opt/binalyze/air/agent/air --uninstall
This command, executed within the Terminal, will seamlessly guide you through the removal of the Agent application from your macOS system.
Last modified 1mo ago