Select Page

Required Files: None


Clean uninstall AV prior to installing Bitdefender.

WARNING – Deletes control panel entry for many AV software but does not actually uninstall them!!


 

<# Enter YOUR subdomain with Syncro MSP
SUBDOMAIN = Change to your subdomain with Syncro
EMAIL = Set up as your email for your account
DURATION = Duration in minutes that you want to record for this process.
#>
 
$email = "EMAIL"
$duration = 15
$startAt = (Get-Date).AddMinutes(-30).toString("o")
$Username = "SUBDOMAIN"
$SubDomain = "SUBDOMAIN"
 
Import-Module $env:SyncroModule
 
# Create Ticket Entry
$result = Create-Syncro-Ticket -Subdomain $subdomain -Subject "Removing Webroot AV Software $env:computername" -IssueType "Software" -Status "New"
write-output $result
$ticket = $result.ticket.number
 
# Put script data below here
 
# @echo off
 
# Webroot uninstaller
del /f "C:\windows\system32\drivers\wrkrn.sys"
del /f "C:\windows\system32\wruser.dll"
rd /s /q "C:\ProgramData\WRData\"
rd /s /q "C:\Program Files\Webroot\"
rd /s /q "C:\Program Files (x86)\Webroot\"
 
reg Delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WRUNINST"
reg Delete "HKLM\SOFTWARE\WRData"
reg Delete "HKLM\SYSTEM\ControlSet001\services\WRSVC"
reg Delete "HKLM\SYSTEM\ControlSet002\services\WRSVC"
reg Delete "HKLM\SYSTEM\CurrentControlSet\services\WRSVC"
# End of Webroot uninstaller
 
#Begin general AV removal / clean up
reg delete "hklm\software\WOW6432Node\Symantec" /f
reg delete "hklm\software\WOW6432Node\AVG" /f
reg delete "hklm\software\WOW6432Node\Kasperskylab" /f
reg delete "hklm\software\WOW6432Node\GFI" /f
reg delete "hklm\software\WOW6432Node\Logicnow" /f
reg delete "hklm\software\WOW6432Node\Mcafee" /f
reg delete "hklm\software\WOW6432Node\Webroot" /f
reg delete "hklm\software\WOW6432Node\WRdata" /f
reg delete "hklm\software\WOW6432Node\Sophos" /f
reg delete "hklm\software\WOW6432Node\Malwarebytes" /f
reg delete "hklm\software\bitdefender" /f
reg delete "hklm\software\Mcafee" /f
reg delete "hklm\software\Symantec" /f
reg delete "hklm\software\Logicnow" /f
reg delete "hklm\software\webroot" /f
reg delete "hklm\software\McAfee.com" /f
reg delete "hklm\software\mcafeeupdater.com" /f
reg delete "hklm\software\EndpointSecurity.removed" /f
reg delete "hklm\software\Bitdefender" /f
reg delete "hklm\software\Sophos" /f
reg delete "hklm\software\Malwarebytes" /f
#End general AV removal / clean up
 
# Updates ticket with comment about success
Create-Syncro-Ticket-Comment -Subdomain $subdomain -TicketIdOrNumber $ticket -Subject "Update" -Body "Remove registry keys for AV Software vendors" -Hidden $False -DoNotEmail $True
 
Create-Syncro-Ticket-Comment -Subdomain $subdomain -TicketIdOrNumber $ticket -Subject "Update" -Body "System is ready to have Bitdefender installed" -Hidden $False -DoNotEmail $True
 
# Marks ticket as resolved and closed
Create-Syncro-Ticket-TimerEntry -Subdomain $subdomain -TicketIdOrNumber $ticket -StartTime $startat -DurationMinutes $duration -Notes "Automated system performed task." -UserIdOrEmail $email
Update-Syncro-Ticket -Subdomain $subdomain -TicketIdOrNumber $ticket -Status "In Progress"