Skip to main content

Remove-Sophos

Description​

Attempts a complete removal of the Sophos Agent Endpoint.

Requirements​

Requires the SophosZap binary to be saved to $env:SystemDrive\temp\sophoszap.exe. The SkipZap parameter can be provided if this is not available; however, some artifacts will remain after completion. SophosZap is available at https://download.sophos.com/tools/SophosZap.exe but requires (free) registration to download.

Usage​

Attempts to remove just the Endpoint via MSI first. Then it attempts all Sophos-related MSIs registered in the Uninstall Registry Key, and finally, it will force-remove any remaining remnants.

.\Remove-Sophos.ps1 -SkipZap

Performs removal steps but skips SophosZap.

Parameters​

ParameterRequiredTypeDescription
SkipZapTrueStringSkips running the SophosZap tool from the vendor, as it can be more destructive than some users may like.

Output​

Location of output for log, result, and error files.

.\Remove-Sophos-Log.txt
.\Remove-Sophos-Error.txt