Nmap and Network Discovery

Nmap is a network scanning tool, that is used to discover hosts and services on a computer network by sending packages and analyzing the responses. Atera uses Nmap for the Network Discovery feature. It allows Network Discovery to extract more data from endpoints, providing more accurate results.

Installation

Nmap OEM and Npcap OEM will be installed when you first attempt to scan a network. The installation will take place on the scanning agent. Devices that were discovered by the Network Discovery scan will not have installed Nmap or Npcap.

Remove Nmap and Npcap

The script below will uninstall Nmap and Npcap from your endpoints. The script needs to run as .bat with Admin rights.

"C:\Program Files\Npcap\Uninstall.exe" /S
"C:\Program Files (x86)\Nmap OEM\Uninstall.exe" /S
timeout /t 10
rmdir "C:\Program Files\Npcap" /s /q
rmdir "C:\Program Files (x86)\Nmap OEM" /s /q
rmdir "C:\Windows\System32\Npcap" /s /q
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" /f
reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" /f
del "C:\Windows\System32\drivers\npcap.sys"
schtasks /delete /tn AteraAgentTasksScheduler /f
schtasks /delete /tn npcapwatchdog /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\ATERA Networks\AlphaAgent\Packages\AgentPackageNetworkDiscovery" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\ATERA Networks\AlphaAgent\TaskSchedulerTasks" /f
del "C:\Program Files\Atera Networks\AteraAgent\Packages\AgentPackageNetworkDiscovery" /q
del "C:\Program Files\Atera Networks\AteraAgent\Packages\AgentPackageTaskScheduler" /q
net stop ateraagent && net start ateraagent