
Then this to delete the instance, just edit the GUID section Get-WmiObject -Namespace "root\Securit圜enter2" -Class AntiVirusProduct In PowerShell, the first line below lists all the antivirus, get the GUID for webroot, there maybe more than one, note the GUID will appear broken in two lines, you'll need to copy and paste into notepad to reconstruct it correctly. Then you want to remove Webroot from Windows Management Instrumentation because the sh**ty program doesn't do it for you 99% of the time (otherwise your RMM will think it is still there and it will cause issues with Huntress if you use or plan to use Huntress). Reg delete "HKLM\SOFTWARE\WOW6432Node\Webroot" /f Reg Delete "HKLM\SYSTEM\CurrentControlSet\services\WRSVC" /f Reg Delete "HKLM\SYSTEM\ControlSet002\services\WRSVC" /f Reg Delete "HKLM\SYSTEM\ControlSet001\services\WRSVC" /f Reg Delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WRUNINST" /f Rd /s /q "C:\Program Files (x86)\Webroot\" Yes safe mode is needed most of the time because services remain active.ĭel /f "C:\windows\system32\drivers\wrkrn.sys"ĭel /f "C:\Program Files (x86)\Webroot\*.*" If it doesn't what I do is reinstall, then uninstall.Īfter that I reboot in safe mode and run this batch.

It should open a captcha box and ask if you're sure.

Uninstall from command line with -uninstall argument as others pointed above.
