6. Removal of Distribution Package for UNIX Systems

To remove all the components of Dr.Web Anti-Virus for Linux solution via uninstall GUI, initialize it with the following command:

# /opt/drweb/remove.sh

If startup has been performed without root privileges, uninstall GUI will try to gain appropriate privileges by itself.

If uninstall GUI fail to start, then interactive console uninstaller will be initialized.

After deinstallation you can also remove drweb user and drweb group from your system.

During the deinstallation the following actions are performed:

Original configuration files are removed from the /etc/drweb/software/conf/ directory.
If operational copies of configuration files were not modified by the user, they are also removed. If the user has made any changes to them, they are preserved.
Other Dr.Web files are removed. If a copy of some old file has been created at installation, this file will be restored under the name it had before the installation. Usually, such copies are named [file_name].O .
License key files and log files are preserved in corresponding directories.
the contents of the ~/.drweb directory is also preserved (the user may delete it manually).

For operation according to schedules Dr.Web Anti-Virus for Linux turns to user cron. At startup and after registration of Dr.Web Anti-Virus for Linux an entry is made into the user crontab about periodicity of Updater operation. It looks like the following:

*/30 * * * * sh -c "(/home/user/.drweb/crontab-check.sh /opt/drweb/scripts/drweb-cc/update.sh 2>&1)>>/home/user/.drweb/crontab-updater.log"

Scanner Daemon schedule entry to the crontab will made only after the corresponding function is enabled in Settings section of Dr.Web Anti-Virus for Linux. It may look like the following:

0 9 * * * sh -c "(DISPLAY=:0.0 /home/user/.drweb/crontab-check.sh /opt/drweb/scripts/drweb-cc/start-scanning.sh 2>&1)>>/home/user/.drweb/crontab-scan.log"

When you uninstall the Dr.Web Anti-Virus for Linux, corresponding entries in the user crontab are not removed automatically and have to be deleted manually.