I work for an MSSP, and found one of our clients has several franchise sites with Webroot installed (They are franchise sites and not allowed to install 3rd party agents such as webroot).
Is there an agent uninstall package or command I can throw it via my agent (Kaseya) that will uninstall it in normal boot, without having to go through whatever control panel is used to control it? I have tried to uninstall via Control Panel and command line while in normal boot, but it prompts to contact an administrator. I am able to reboot it into safemode and remove it via command line, but there are 25+ machines and remoting into each of them to do this would be a pain.
Already have an account? Login
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Do you guys not have an Suite/Agent_Uninstall.exe or something similar? It would make sense to build one for sysadmins or for problematic endpoints.
Unfortunately, as these sites are part of a franchise, they typically have a property management company that is aware of the Franchise's IT Policy, but occasionally they will sell the property to a company that isn't aware and I end up in the situation I'm in.
I've spent the last week just doing some maintenance that never gets done, and webroot wasn't the only agent I found. Thanks for your help nic!
We've considered making a removal tool, but our devs aren't in favor of it. Such a tool could be incorporated into malware and then used to turn off Webroot before infecting the machine.
Unfortunately you'll have to do safe mode with networking on the machine locally if you want to remove it from the agent side.