Serious Discussion How to Safely and Completely Remove AV

[IceMan7]

How to safely and completely remove AV from Windows 10/11?

I have 3 solutions in mind - Fsecure, Eset and Bitdefender TS.

1. Uninstalled from Windows's Add or remove programs list?
2. With the uninstaller tool from Fsecure, Eset, BD?
3. With an additional program such as Revo/HiBit?

Does each AV have a different method or do we remove each one in the same way?

 

[Nunzio_77]

In my opinion choice 1.

 

[omidomi]

3.revo

 

[Jonny Quest]

From my experience with F-Secure, they (forum, tech support) always suggest using Windows Apps/uninstall, and only if you're having problems using the uninstall tool. But either way, there are about 3 folders left (Hidden etc).

Same process with BD, but if you don't use the uninstall tool, you will manually have to uninstall the BD Agent and VPN. The uninstall tool works quicker in that way, uninstalling everything at one time. There is usually a folder left in Program Data/BD Logging when using the uninstall tool.

 

[vonvon]

Antivirus removal tool, updated every month.

Antivirus Removal Tool

Antivirus Removal Tool (freeware) is a portable program to detect and completely remove antivirus software. It will help you to identify current and past installations, and it will provide you with the official specialized uninstallers. These are designed by the manufacturers of the antivirus...

antivirus-removal-tool.com

 

[IceMan7]

Antivirus removal tool, updated every month.

I've been using REVO for years and when you try to uninstall a program, it takes you first to Windows Add/Remove Programs in the Control Panel (uninstalls the same way as Windows). Then you have the option to remove registry entries and folders.

Does this tool work the same way?

 

[mlnevese]

Sometimes, you may need FRST (Farbar Recovery Scan Tool), such as when it keeps showing up in the Defense Center as the active software. I use it frequently because it makes it easy to check if a security software has left behind drivers, services, scheduled tasks, etc. I also find it quite simple to use.

 

[Digmor Crusher]

2

 

[vonvon]

This tool give you too the option to remove files and folders. Very very powerfull.

 

[brambedkar59]

Sometimes, you may need FRST (Farbar Recovery Scan Tool), such as when it keeps showing up in the Defense Center as the active software. I use it frequently because it makes it easy to check if a security software has left behind drivers, services, scheduled tasks, etc. I also find it quite simple to use.

I have it bookmarked.

Troubleshoot - How to clean all registered security programs in Windows defender center?

Hi there yesterday i tryed to install for testing forticlient and it prompt me some security software was installed on my pc. Is more time i dont use those programs, and i think some of them have "traces" on windows center and are still registered as av, firewall, etc. I tryed to use pc cleaners...

malwaretips.com

 

[icotonev]

Farbar Recovery Scan Tool (FRST) is a diagnostic tool incorporating the ability to execute prepared script solutions on malware infected machines. It will work equally well in normal or safe mode and where a machine has boot up problems it will work efficiently in the Windows Recovery Environment. Its ability to work in the recovery environment makes it particularly useful in dealing with problems associated with machines experiencing difficulty when booting up. The tool is not specifically designed to uninstall AV. I do not recommend its arbitrary use without the necessary preparation ..!

 

[Nunzio_77]

I suggest option 1 and then after uninstalling it I suggest to do a search with this tool "Antivirus Removal Tool".

When it finds the paths of AV residual file traces, right click, go to the path and delete files and folders.

 

[IceMan7]

I've known FRST for years. I used it once, because I had a problem with Avira Free remnants on some computer in history. But I used it with the help of Picasso from the www.fixitpc.pl forum. By the way, I recommend this site, you can learn a lot about Windows
I don't know enough about processes and the registry to remove something FRST myself
Now that you reminded me about FRST, I did a scan. I uninstalled Fsecure thanks to REVO and FRST found nothing in the entries.
ESET used to recommend uninstalling them with the uninstaller tool. Now there is no problem and you can safely uninstall using "normal" methods, especially from Windows 10?

 

[icotonev]

There are also people in our forum who are aware of the matter (a little advertisement) ... Just visit the section:

Windows Malware Removal Help & Support

Get help removing adware, malware, spyware, ransomware, trojans, and viruses from Windows PCs. Follow the instructions in the pinned topics first. For security purposes, only authorized members may respond to requests for assistance.

malwaretips.com

 

[IceMan7]

I don't doubt it

 

[icotonev]

And my answer to the asker is .. 2 + 3 ....!

Anti-virus software components insert themselves deep into the operating systems core where they install kernel mode drivers that load at boot-up and create numerous files, folders, and registry entries in various locations making it more difficult to remove. It is not uncommon for some anti-virus programs to not completely uninstall itself using the usual method of Apps & features in Windows 10 or Programs and Features (Add/Remove Programs) in Control Panel or to result in various errors due to the presence of related services and processes running in the background.

Most anti-virus vendors provide clean-up utilities (removal tools) on their web sites to remove remnants left behind after uninstalling, or for a failed uninstall or failed reinstall. Remnants include related registry entries, files and folders created in various areas of the OS. It's always best to download directly from the vendor's site to ensure you are using the most current version of the uninstall utility as it is not uncommon for third-party hosting sites to have outdated versions which may not work properly.

Comprehensive List of Uninstallers and Removal Tools for Antivirus Software

• ESET: List of Uninstallers (removal tools) for common antivirus software
• Bitdefender: Removal tools (uninstall tools) for common antivirus software
• Antivirus Removal Tool
• List of Antivirus Uninstaller Tools

Answers to common security questions - Best Practices - Anti-Virus, Anti-Malware, and Privacy Software

Page 1 of 2 - Answers to common security questions - Best Practices - posted in Anti-Virus, Anti-Malware, and Privacy Software: Answers to common security questions - Best Practices by Russ Stamm (quietman7) Best Practices for Safe Computing - Prevention of Malware Infection Common sense...

www.bleepingcomputer.com

 

[brambedkar59]

Farbar Recovery Scan Tool (FRST) is a diagnostic tool incorporating the ability to execute prepared script solutions on malware infected machines. It will work equally well in normal or safe mode and where a machine has boot up problems it will work efficiently in the Windows Recovery Environment. Its ability to work in the recovery environment makes it particularly useful in dealing with problems associated with machines experiencing difficulty when booting up. The tool is not specifically designed to uninstall AV. I do not recommend its arbitrary use without the necessary preparation ..!

I am not recommending FRST's use as daily solution. But I had to use it when AV's official uninstaller failed to do its job. It was my last resort, and it worked, that's why I have it bookmarked.

 

[Jonny Quest]

I am not recommending FRST's use as daily solution. But I had to use it when AV's official uninstaller failed to do its job. It was my last resort, and it worked, that's why I have it bookmarked.

Thanks, I checked your previous post, went to the link, and now I have it bookmarked, too I didn't know about that one

 

[roger_m]

I recommend doing steps one and two. Uninstalling it normally and then running the vendor's removal tool if they have one. An uninstaller like Revo won't find all the leftovers unless you actually used it to monitor installation of the antivirus, so that they have a record of every file and registry key created. Often there are drivers left behind when you uninstall an antivirus and third party uninstallers won't find these leftover drivers unless you actually monitored the installation.