Using REG QUERY to Find Uninstallers on Remote Machines

 One of the most tedious tasks a System Administrator or Information Security Analyst faces is locating the proper uninstaller to remove unauthorized or vulnerable application software package from a remote client machine.

The Command line command REG QUERY is your friend.

Open a command prompt with administrator level access and enter the following command:

REG QUERY \\RemoteMachineName\HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall /s

This command returns all uninstaller information listed 

REG QUERY \\RemoteMachineName\HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall /s

This command returns all uninstaller information listed under the WOW6432Node section

Review the information from these two commands, and locate the uninstaller required.