Spawn

Administrator
MalwareTips Staff
Verified
Joined
Jan 8, 2011
Messages
17,572
OS
Windows 10
Antivirus
Microsoft
#1
Not sure if this has been posted, but I saw a post by pbust on their forums.
If you want or need to remove leftovers after uninstalling MBAE from Control Panel, simply download, unzip and "run as admin" the attached mbae_clean batch file.
(All credits to pbust) : Batch file contents can be viewed with Notepad.
Code:
@color 48
pushd "%~dp0"
cd /d "%~dp0"
CD /D %WINDIR%
CD\
cls
@echo off

:CHECKADMIN
net session >nul 2>&1
if %errorlevel% equ 0 (
color 57
goto fix ) else (
goto :NonAdmin )
goto eof

:fix
if not defined ProgramFiles(x86) goto x86
echo/
cls
echo =======================================
echo    Malwarebytes Anti-Exploit Cleanup
echo.
echo Run this as admin to remove leftovers
echo after uninstalling Anti-Exploit
echo =======================================
echo/
reg delete "HKLM\SOFTWARE\Malwarebytes Anti-Exploit" /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Wow6432Node\Malwarebytes Anti-Exploit" /f >nul 2>&1
reg delete "HKLM\SYSTEM\ControlSet001\Services\MbaeSvc" /f >nul 2>&1
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\MbaeSvc" /f >nul 2>&1
reg delete "HKLM\SYSTEM\ControlSet001\Services\ESProtectionDriver" /f >nul 2>&1
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\ESProtectionDriver" /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Malwarebytes Anti-Exploit_is1" /f >nul 2>&1
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Malwarebytes Anti-Exploit" /f >nul 2>&1
reg delete HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /v "Malwarebytes Anti-Exploit" /f >nul 2>&1
del /S /Q "C:\ProgramData\Malwarebytes Anti-Exploit" >nul 2>&1
del /S /Q "C:\Documents and Settings\All Users\Application Data\Malwarebytes Anti-Exploit" >nul 2>&1
echo/
echo MBAE has been removed from the system. Please restart the computer
echo/
pause
goto eof

:x86
echo/
cls
echo =======================================
echo    Malwarebytes Anti-Exploit Cleanup
echo.
echo Run this as admin to remove leftovers
echo after uninstalling Anti-Exploit
echo =======================================
echo/
reg delete "HKLM\SOFTWARE\Malwarebytes Anti-Exploit" /f >nul 2>&1
reg delete "HKLM\SYSTEM\ControlSet001\Services\MbaeSvc" /f >nul 2>&1
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\MbaeSvc" /f >nul 2>&1
reg delete "HKLM\SYSTEM\ControlSet001\Services\ESProtectionDriver" /f >nul 2>&1
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\ESProtectionDriver" /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Malwarebytes Anti-Exploit_is1" /f >nul 2>&1
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Malwarebytes Anti-Exploit" /f >nul 2>&1
del /S /Q "C:\ProgramData\Malwarebytes Anti-Exploit" >nul 2>&1
del /S /Q "C:\Documents and Settings\All Users\Application Data\Malwarebytes Anti-Exploit" >nul 2>&1
echo/
echo MBAE has been removed from the system. Please restart the computer
echo/
pause
goto eof

:NonAdmin

   color 4E
   cls
   echo/
   echo ########   ########    ########     #######    ########
   echo ##         ##     ##   ##     ##   ##     ##   ##     ##
   echo ##         ##     ##   ##     ##   ##     ##   ##     ##
   echo ######     ########    ########    ##     ##   ########
   echo ##         ##   ##     ##   ##     ##     ##   ##   ##
   echo ##         ##    ##    ##    ##    ##     ##   ##    ##
   echo ########   ##     ##   ##     ##    #######    ##     ##
   echo/
   echo/
   echo ########## ADMINISTRATOR PRIVILEGES REQUIRED #############
   echo/
   echo This file must be run as an administrator to work properly
   echo If you're seeing this after clicking on the batch file
   echo then log off and log back on with an Administrator account
   echo or right click choose "Run as administrator" on Windows 7/8/10
   echo/
   echo ##########################################################
   echo/
   PAUSE
   EXIT /B 1
)
@echo on
:EOF

Source: Frequently Asked Questions