https://github.com/noderaven/uninstall-webrootandenabledefender

This script automates the uninstallation of Webroot SecureAnywhere, performs a thorough cleanup, and enables Microsoft Defender Antivirus.
https://github.com/noderaven/uninstall-webrootandenabledefender

Last synced: 11 months ago
JSON representation

This script automates the uninstallation of Webroot SecureAnywhere, performs a thorough cleanup, and enables Microsoft Defender Antivirus.

• Host: GitHub
• URL: https://github.com/noderaven/uninstall-webrootandenabledefender
• Owner: noderaven
• License: mit
• Created: 2025-06-10T19:09:55.000Z (11 months ago)
• Default Branch: main
• Last Pushed: 2025-06-10T19:37:54.000Z (11 months ago)
• Last Synced: 2025-06-10T20:34:24.573Z (11 months ago)
• Language: PowerShell
• Size: 14.6 KB
• Stars: 0
• Watchers: 0
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Webroot SecureAnywhere Uninstaller & Defender Enabler

This PowerShell script automates the complete uninstallation of Webroot SecureAnywhere, performs a thorough cleanup of leftover files and registry entries, and then ensures Microsoft Defender Antivirus is enabled and running.

## Description

This script is designed for robust and reliable unattended execution, combining a staged approach with a forceful, deep-cleaning mechanism to remove Webroot and activate Defender. It's particularly useful for system administrators or users needing to completely remove Webroot and switch to the native Windows security solution.

## Features

* **Execution Policy Bypass:** Temporarily sets the PowerShell execution policy for the current process to allow script execution.

* **Staged Uninstallation:**

  * Attempts a standard uninstallation using `WRSA.exe`.

  * If the standard uninstall is insufficient, it proceeds to a two-stage cleanup.

* **Comprehensive Cleanup:**

  * **Stage 1 (Gentle):** Attempts to remove common leftover Webroot folders.

  * **Stage 2 (Forceful):** If Stage 1 fails, it escalates by stopping Webroot services, terminating processes, and performing a deep-level registry and file system purge.

* **Dynamic WMI Cleanup:** Conditionally removes Webroot entries from WMI (Windows Management Instrumentation) if the cleanup is successful. It dynamically selects the correct WMI namespace (`SecurityCenter` or `SecurityCenter2`) based on the operating system version.

* **Microsoft Defender Activation:**

  * Enables and starts core Microsoft Defender services (`WinDefend`, `WdNisSvc`).

  * Configures Defender through `Set-MpPreference` (if available) and direct registry edits to ensure real-time protection and other features are active.

* **Robust Logging:** Provides clear output messages indicating the script's progress and any encountered issues.

* **Retry Mechanism:** Includes a retry mechanism for folder deletion, making the cleanup more resilient.

## Usage

To run this script:

1. **Download:** Save the script (e.g., `Uninstall-WebrootAndEnableDefender.ps1`) to your local machine.

2. **Elevated PowerShell:** Open PowerShell as an **Administrator**.

   * Right-click the PowerShell icon and select "Run as administrator."

3. **Navigate:** Change directory to where you saved the script: