Serious Discussion How to Safely and Completely Remove AV

It's not malware. It's detected as malware by two AI scanners which often have issues with false positives, which is the case this time. It's detected by two other scanners as being a PUP, rather than malware. The current version of JCleaner was released and first scanned at VT in September of last year. If it was actually malicious, some of the big name antiviruses would have added detections for it a long time ago.
I recently uninstalled ESET using the Anti Virus Removal Tool. It uninstalled but when I run the Anti Virus Removal tool after removal, it still shows ESET as my antivirus. Any suggestions?
 
I did use the Antivirus Removal Tool but it shows ESET as currently installed.
Some options you can do is to download a program called everything by voidtools and install it. After you run the the program just search for eset and it find the program file remnants , delete these if some folders are locked and cannot be deleted you need to.download iobit unlocker as well and run it in forced mode and then select unlock and delete. Another good option is to run autoruns and search for any left over start up entries / registry entries. Al these removal steps need a certain level of understanding of what you are doing , because you can definitely screw things up if you remove the wrong things and leave a corrupted or even worse , unboottable system. If you have some restore points save before you installed eset or even a good backup before you installed its best to revert to those , this is the safest method.
 
  • Like
Reactions: simmerskool
I did use the Antivirus Removal Tool but it shows ESET as currently installed.
Check the following registry paths for any ESET entries and delete it (be careful when dealing with registries, check entries twice before you delete).

2025-01-20 at 18-37-53 RegistryFinder.png
 
  • Like
Reactions: simmerskool
Some options you can do is to download a program called everything by voidtools and install it. After you run the the program just search for eset and it find the program file remnants , delete these if some folders are locked and cannot be deleted you need to.download iobit unlocker as well and run it in forced mode and then select unlock and delete. Another good option is to run autoruns and search for any left over start up entries / registry entries. Al these removal steps need a certain level of understanding of what you are doing , because you can definitely screw things up if you remove the wrong things and leave a corrupted or even worse , unboottable system. If you have some restore points save before you installed eset or even a good backup before you installed its best to revert to those , this is the safest method.
I tried these options but still the same, still shows as currently installed. Thank you for your help. I do not know what else to try at this point.
 
  • Like
Reactions: simmerskool
I recently uninstalled ESET using the Anti Virus Removal Tool. It uninstalled but when I run the Anti Virus Removal tool after removal, it still shows ESET as my antivirus. Any suggestions?
Try this:
 
Try this:
Thank you. I will try this and let you know.
 
  • Like
Reactions: simmerskool
I did use the Antivirus Removal Tool but it shows ESET as currently installed.
Sorry for being late to the party.

Some uninstallers (even the specialized ones) leave behind the entry created by the antivirus in the WMI’s database that reports to the OS that the antivirus is installed. That's why ART still show it as being currently installed.

If you’ve already run the ESET dedicated uninstaller, removing the WMI entry should fix the issue. In my experience, these two PowerShell commands always do the trick: Remove any trace of an Antivirus was installed (WMI)
 
Last edited:
Some uninstallers (even the specialized ones) leave behind the entry created by the antivirus in the WMI’s database that reports to the OS that the antivirus is installed. That's why ART still show it as being currently installed.

If you’ve already run the ESET dedicated uninstaller, removing the WMI entry should fix the issue. In my experience, these two PowerShell commands always do the trick: Remove any trace of an Antivirus was installed (WMI)
FYI (fwiw) I tried to goto the URL you posted for those 2 powershell commands, but it was blocked by Osprey extension. :confused:
 
  • Like
Reactions: Parkinsond
I just managed to uninstall kaspersky manually without the need for any tools.
Scrubbed the remains from C drive and registry.
K is one of the most uninstall-friendly security suits.

FYI (fwiw) I tried to goto the URL you posted for those 2 powershell commands, but it was blocked by Osprey extension. :confused:
Norton is aggressive with the highest fps
 
Last edited by a moderator:
Kaspersky leaves some drivers behind, make sure to get rid of those as well. Also check scheduled tasks.
Cleaned everything from C drive (after performing search).
Only few registry entries could not be deleted.
Anyway, everything is going on okay after uninstalling K and installing AVG up to the moment.
 
  • Like
Reactions: mlnevese