Security Software Removal and Advanced Features

Advanced and not yet tested

Removing security software, drivers, services or system components can disable protection or hardware. The developer has not yet tested the High Risk tier or security software removal. Back up your data, create a restore point and make sure Windows Security or another security product will be active afterwards.

UniClean can detect security software and offers a removal workflow for it on the Security & Drivers page. It is an advanced feature, not the first thing most people should reach for. For most security products, the vendor's own official removal tool is the recommended route.

Before you start

Make sure another security product, or Windows Security, will protect the PC afterwards. Microsoft says Microsoft Defender Antivirus turns back on automatically when the other antivirus is uninstalled, but check it in Windows Security.
Save your licence or account information if you may reinstall.
Turn off the product's self-protection (tamper protection) only through the product's own settings, because its uninstaller may refuse to run otherwise.
Enterprise agents (such as CrowdStrike, SentinelOne, Cylance and VMware Carbon Black) are flagged. Your organisation may require them and removal usually needs an uninstall token from IT.

The workflow

The plan is always High Risk: typed confirmation, a restore point and the extra responsibility screen.
The product's folders, registry keys, services and tasks are archived in the Recovery Vault.
UniClean runs the vendor's official removal tool, silently if the tool supports it, or falls back to the product's own uninstaller.
Whatever is left (services, drivers, folders) is cleaned up by hand-picked items, still archived first.
UniClean checks whether Microsoft Defender or another antivirus is active again.

Vendor removal tools

UniClean does not bundle or download vendor tools. It links to the vendor's official page and, once you have downloaded the tool, you add it with one click ("I downloaded it - add"). Most of these tools are interactive and may ask for a CAPTCHA or a Safe Mode restart.

Vendor	Removal tool UniClean knows about
McAfee	McAfee Consumer Product Removal tool (MCPR)
Norton	Norton's official removal tool
Avast	Avast Clear
AVG	AVG Clear
Bitdefender	Bitdefender Uninstall Tool
Kaspersky	kavremover
ESET	ESET Uninstaller
Sophos	Sophos Zap
Malwarebytes	Malwarebytes Support Tool
Others (for example Avira, Trend Micro, Webroot)	No tool entry: manual fallback through the product's own uninstaller

Vendors rename and replace their tools, so always download the current version from the vendor's own support page. UniClean's list covers 29 security vendor entries in total.

Manual fallback

Without a vendor tool, UniClean uses the product's own uninstaller and then offers the remaining services, drivers and folders as separate items. Each is archived first. This path is the least tested of all, so review every item before confirming.

Drivers and system components

Third-party driver packages (oemNN.inf) are removed with pnputil and are always High Risk. Microsoft drivers, core Windows services and Windows components are hard-blocked. Removing a driver can disable a device, such as display, audio, network or input.

There is no Nuke Mode

UniClean has no separate "Nuke Mode". Every powerful action goes through the same High Risk tier and the same confirmations described in Risk Tiers and Safety.

Use at your own risk

Removing software can break other programs or leave a PC unprotected. Back up important data and create a Windows restore point first. UniClean is Beta software: only its everyday (Safe tier) uninstall and restore flow has been tested by its developer, so treat its advanced features as advanced and read every confirmation.

Guides: uninstall McAfee and uninstall Norton, both starting with the vendor's official method.