Remove-Item -LiteralPath "C:\ProgramData\Sophos " -Force -Recurse Remove-Item -LiteralPath "C:\Program Files (x86)\Sophos " -Force -Recurse Remove-Item -LiteralPath "C:\Program Files\Sophos " -Force -Recurse Remove-Item -LiteralPath "C:\Program Files\Sophos* " -Force -Recurse Select-Object -Property DisplayName, UninstallString $SNTPVer = Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall, HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall | #Uninstall Sophos Network Threat Protection Wmic service where "caption like '%Sophos%' " call stopservice
Net stop "Sophos Endpoint Defense Service " Net stop "Sophos System Protection Service " REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\SAVService\TamperProtection " /t REG_DWORD /v Enabled /d 0 /f REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Config " /t REG_DWORD /v SEDEnabled /d 0 /f REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Config " /t REG_DWORD /v SAVEnabled /d 0 /f REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos MCS Agent " /t REG_DWORD /v Start /d 0x00000004 /f REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SAVService " /t REG_DWORD /v Start /d 0x00000004 /f #Disable Tamper Protection (may require reboot) # ***Note: This tool needs to be run as an admin with Sophos Admin # # from Program Files, Program Files (x86), and ProgramData # # The tool will then remove all Sophos services and directories # # seek out uninstall strings for associated Sophos Products, # # This tool will stop all running Sophos Services and tasks, #