topic Re: Anti-tamper protection preventing uninstall in Cortex XDR Discussions

Anti-tamper protection preventing uninstall

Maxstr — Tue, 05 May 2020 20:27:22 GMT

I installed the 7.1 agent on Windows 10 1909, but I ran into issues with sysprep so I'm trying to uninstall it. I'm getting the message that it can't be uninstalled unless I disable Anti-Tamper protection. I was able to disable it with cytool protect disable, but I've never run into this message with Traps. Is it normal to need to disable anti-tamper to uninstall Cortex?

Re: Anti-tamper protection preventing uninstall

Sailesh_Aryal — Tue, 12 May 2020 19:54:35 GMT

I noticed that on the new version. Unless you disable the anti-tamper, you can't uninstall it.

The only solution I found was to use Traps Cleaner which works on Cortex too. You can get it from support if you don't have it already.

Re: Anti-tamper protection preventing uninstall

dfalcon — Wed, 13 May 2020 14:12:21 GMT

Hi @Maxstr -

Quick question - how are you doing the uninstall?

a.) Add remove programs (with the password)

b.) From the tenant console

c.) Command line / script