From 43434e811c125c7e59fcfe12f31baa471657045a Mon Sep 17 00:00:00 2001 From: Ovais Rashid Date: Tue, 9 Jun 2026 15:22:35 -0400 Subject: [PATCH 1/3] Rocket Syber Agent --- .../uninstall-rocket-cyber-agent.md | 48 ++++++++++++++++++ .../managed-files.webp | Bin 0 -> 10148 bytes .../sample-run.webp | Bin 0 -> 6388 bytes 3 files changed, 48 insertions(+) create mode 100644 docs/vsa/procedures/uninstall-rocket-cyber-agent.md create mode 100644 static/img/docs/71eaf31e-adb1-4fd7-84b2-31ecf4873ac5/managed-files.webp create mode 100644 static/img/docs/71eaf31e-adb1-4fd7-84b2-31ecf4873ac5/sample-run.webp diff --git a/docs/vsa/procedures/uninstall-rocket-cyber-agent.md b/docs/vsa/procedures/uninstall-rocket-cyber-agent.md new file mode 100644 index 000000000..7980bbd3a --- /dev/null +++ b/docs/vsa/procedures/uninstall-rocket-cyber-agent.md @@ -0,0 +1,48 @@ +--- +id: '71eaf31e-adb1-4fd7-84b2-31ecf4873ac5' +slug: /71eaf31e-adb1-4fd7-84b2-31ecf4873ac5 +title: 'Uninstall - RocketCyber Agent' +title_meta: 'Uninstall - RocketCyber Agent' +keywords: ['rocket', 'cyber', 'agent'] +description: 'Uninstalls the RocketCyber Agent from Windows endpoints by stopping and removing associated services, registry entries, and installation files.' +tags: ['antivirus', 'application', 'uninstallation', 'windows'] +draft: false +unlisted: false +last_update: + date: 2026-06-09 +--- + +## Summary + +This script performs a complete removal of the RocketCyber Agent from Windows systems. It stops agent services, deletes uninstall records, and removes all RocketAgent files and directories. + +## Sample Run + +![Image1](../../../static/img/docs/71eaf31e-adb1-4fd7-84b2-31ecf4873ac5/sample-run.webp) + +## Implementation + +1. Export the agent procedure from ProVal's VSA RMM instance. + **Name:** Uninstall - RocketCyber Agent + + The export will download the necessary XML file. + +2. Import this XML file into the partner's VSA RMM instance. + +3. Export the < Name of the ps1 file > from the ProVal's Internal VSA. This is also placed under the below path: +`Manage Files` > `Shared Files` > `PVAL` > `rocketagent_uninstall.ps1` + + ![Image1](../../../static/img/docs/71eaf31e-adb1-4fd7-84b2-31ecf4873ac5/managed-files.webp) + +4. Map the `rocketagent_uninstall.ps1` into the `12th` step of the script in the client's environment. + +## Output + +Script Logs + +## Changelog + +### 2026-06-09 + +- Initial version of the document + diff --git a/static/img/docs/71eaf31e-adb1-4fd7-84b2-31ecf4873ac5/managed-files.webp b/static/img/docs/71eaf31e-adb1-4fd7-84b2-31ecf4873ac5/managed-files.webp new file mode 100644 index 0000000000000000000000000000000000000000..851d79cf870fdbfa3bd05da03151f73dd2f2f249 GIT binary patch literal 10148 zcmZ9yb8se1@GTr?!zcE}wr$(?#@YCZZQHi(jcwbuHcmEva^K&r?|xPH&L2~Ks%E-+ z=1f<2of=gcNy!{4Ffc6%QDseKZsLUhY~=#5TyR<~2zqeAMCm-a(h@R~!nH}91~fQJ z`vaE(P>Ikrr<(5`hbQ_;<&IJ)h;7;Ew9go@Jex*n{B8GT@qOgC;+_6Ya*6vz^|e=% zUg=QikgjwiG*JI)#9yxr0DWTmk%MeDwEo>*?KKP9fp{JqHieq~cE26}QG?2RvGYJ5 zp!|9NBYzWrny>0lEfA5q|Ma)| z9Yos>--LgS8il^UPmysDLVOT>4*g`HiVGd%108adCWup97*X#S9wXn#(c(e}1)+O+ z*|uq9RSe8*T|c4VQLyj{OR4LcIC()3&_586;#E_$bnt)rgF}QMb?LuO&v>OsoODW} zJ>(F6Y5$$|$WGUSjh7@MF2$Y0 ze=SIz7(0#8hqZKz$}|FKZK8lxbN80-6=tue>t9luHPhtv9 zGFM_Z2egh%G*^_izh24q_0CYBWXn&`JV376+D6TUZwx0rrwtTjqw)#k3llC_c*Em_ zxuHmEsD8#S)epHrO5Xys7Hahj!Qyq-4GH#?h?Cy2R2%gIE#al7^*)o1BTYXM#e#vSDr!2WAjE{bCKQ+?LhwTReB>v@@9|{)cXhqC5vh892 z5y6YPrkKVJ_vu1U!i*+t?RNYr*ThnntT1wEUA!*O-+FIhLzOnsgi?=A@z7G#FKDbl zm~BP}^V}P4nu}taiVo-=2`61ub-H6%d%aJ4fS?B^?s3$mtI28^?xaWEACXzW2kAQn zs-S$);&|(V6Sjp5v3iUrHkgn%dJ#JFf{*XgosP#B5Axwdz;{jC?jgLNA8n>eHohFi z5J0F}GQ3G&_rgS`|9HiE8=(-J+5I=HG?kxuiuIXqJwHw-R?!DyXBv!IQ+fD5Ih0fh zmGRC?6RTZw;RrXW&hH2?4IO)3gPcY=X|Kr-d;2xE1YYkf~wKrb10VX*%O zWckDzvkSbAin=B=(oOE)qxFxgt|?;<*$;SuS`oRU- zxY2Z+IW9z=Ge`9coyi9*7Wu zm!r6K-eQZJOYTWvV$1%ag9c8mi>8{DRj!?IQm-PsM$+S88CoSQnkF8qKl}qOG2N%< zUfyeINA57ecXh$(TDBmEMdlFIP;DXa`kh6NvO{Wq#vGPyBxEj!>3w=OtZgR*viK*4 zYV%b6#L_^?;}hLOyCy~OwoQ#(xrn1B?~-4g#MMWqqQsGi{Qh@eHQrsSP@cy9NW@L? zi;Lf`+&6!UHa9x=9A2AiLO!Y>hGm(f*>E45R=@9ox=*+dZF`tEi)f-&XJ&+r`7pE<}*&miFFwJ3D8Nk`F)=v8!LjLx9 zXAuUw{bdPbZ^ulMnheVUM_ri|&8R#?Ebkw2GhI^8+--xX8_46Rxi<9=e2cdQBU)6F zPNe$^X_O9}FM>*2$Uu1o57IbsXfI(NOO<0Wl#y-v=gcr#Hz>?g|`@`1ys#v1idR}T&FgZfY1*DQk^FyhisNIx5SdnJn&o& zw-1Y^aHk!%OTmZOj$IwV1#t%B&MyL2i5;KKC~=!eVY}{oW_Jk?b#A;m-MF+)La4^T8JZkHRDK&37)yLL>39^J`;$2dDM=G0^e?-B zUfTOy2p2JU_7%Kf-b;qqF^A!^K(3FLYtL z?Wd@x_02HzE}PV*REI)Ie!4r;wM}P^XxELcEm#0t9m;npVbGO2m2Y)jJi>ylv2k7U z@E$A04iu+r7f+M6Ks0wE&!Df#FCIfph&w26@ZiB`=C)oKW7bAwqCMQY+}yguK*LOn z_PTU^xYU)_6&tqxMB1hRb9c);Orp#tEs8P;Hi^cIPRjNpBvRo;ovBRZ?PVEt7{XqX zt3&w?_SJJrjJ3j)ykRE{uWhi9K@7_=-|=ig?-G8yW_jtmJSZRinmsyw%DznExOkU$ zlo@0W%2BocJ@8u}6*yM@(aC2iQyq@2t<#|qj)uRQ8o6oLD35?Z3kYty=?5u;F;9|V17L%cGCm(Vx%Z%4YgqBDA*-U&$NU;0etBIy!M@67 z%2~5k3zMnA?mAzsw-(wa%hUDJ^}A^(zg=fNC-$zYy`7Q@Iz<%71TiegVr)|}9GiGY zL0Ct&qoh$GB6a4+|5UVpquV7B@=FNza$E!wg}+qp8^z4gJ!|n)52bT(phQkwr>PiF z%Q?ZtLa3@eY#)**+Y-u$IFMYm#jGHAd>e@pie(z)c)fiLG5kT?DCF(C2*tR}SqO6$ z4LI;({op3%(D_S($b zA;+1cA>HbSS8G4?(fve!DV-R&Nh2aLq+y=bsW-FN;4 z2fXH9X7nK;oP9Wt!M`75WAL!m95Q;GHyl3Ze2sbBf5=+$ElJ<+9_}5nA4E~EyIzvd z7bwBVVnR&`NnfU|P3lVZ1C+;iMmnPE9D+gw>`eFT&=2mYhK|KaP^wR;Yy6Afg83Ry zRYY+MPn3jgMw^!AisSA6gHQr8WUY^v`BAU2m zTYPN*IU||zqXh7FEb|&;IJtB_PGXMa1tu7|jFh3;AmT|90<`6m7e%i4ll#gi#=wxq zKPGm01mk%WV?SpSf6EGDlc@?9P<7molG<-YA?i#1@qe&>3@pP45mN7%uBbe};U88I zHPBZJnDNeh0%>JK_pFm@4%KG=T6=zJ-S0PJo2lKI_lqjkTneMQ=VVdIKejEj_Qy*@ zj%AWqk=({djP_t20-1cGC1tnwfE6V)SRMjVa?b201fV`7RZ}P8_!zTM5F98SY zZb;6ye+WKShup#02=wUIG3Rbr>E#Y+BG^EBcfm};@uJAW?hXPh?* zo&`T^runhWWM1wSIMwP#Rw@+{yD1c>Hh_CaQa&7B`2(DT13Xr$&CoeTrH=TGoQ^>w zEgvze@Rh|D9v?jUPBlknO&D%hE$xJCB!K?5G;WKWo2ULE(s!bOZVI1Ady_J5+?Zq1 zdLyT)gN`cNp`pQ@{-GUTuv7a9FIQUEh5SzQWddE@88#S7U6@dw15f;KF6*mt(%pUb zXNNX%1qv|Rb-ENR$GTs)^3GWaQZq(UpJl`G* z`UzV!_7^kGmBXQ>1RF0O@{fviJ!!}f^Km{5=HVTu^N(`4(n6t?Mc|@oXPo=KJQU7A++X&E1C4N_YFr8+c@DV{SQAd|Ba@h>$o+gu2~vZ7xHJYxe^m zm1H-LZtr+G9MR@*97QDX1i|wu({dktpC~XeaBJ+5o6U6jO7D4;c(xa=*BO z#Lg<>bIMJ~i=F$|c6!=s>o1E83+kdTO$%KEj;Tjh5{^t0cLDI{M#`CERNAnztOqRh zZoGf3FB=y^>i4{%%pHPNrzu6a&j2eMyhC3>F*X&*-vTw$w6Y#%ijbl=UP_1O%fzs1 zhzV7;+MQW#63c5Tne#o}o5NN8+?Kg3OXeG&HuS72ogKm+gaYxUBX#+-(0dLZR`)yO zp2H@r4?;EIjzCj)-)adt0{6%S!HecaX5#u07jhq|OONIfGv_kicVe8 z4afrqcky0|gF5FJW$!8ldh{JtTt2oBxx~H(mHi1cSYvjZMKFQDNh`mCkv?U<7=uQA zwq-WFf#%!&m~g>vT8e2&4OX{eK)6W?Y}&NpX(@SL5&1_Vark6aYY1?J#2cS(%%NQ8 zrzCPw19iNElNBdcQL4J0YC+9V1~b>cUAnxTs9pmkvtrema=4Oh>FFx0_=;?!f5<31 zT05q0%&PcDf-DI;GGoIU?G>iw_bDMWtu_;XlvSw zhaX}Y;tpq;_f}$p*wx?~)um;MKXz|Tdu$K7zKYbM5o5IevI+`e`HvCZ=J5+dz}Hp0 zb{G8b4*q|p9Z0D9Roro*wK;aJzAYWD3~{XkHSe5b$)G022cXCc8tfpN#`{egnrBBn z)g^l)qN^$=3kRlj{=<4^-n`1o9-_F+AVqYkshtpfgstROCV2vR0jJZB zV$kgkFF5hzr#`c%)x4~?cp+YvmzNkj)Zg}o_We*Am-rW<7~77zG4by*d8qus#VS$5 zp-cl->+G&u*qqQ(VSi|r#Wy!=#J9=jUKzajoLIG4;|oNvnB3NwR++o6O5bU5EDtoa zmFKE3$8(*R^1?ilF@g*HoJH}O12(j*Ir@T-nyThMwoQ^lRTHQ6nH1i&W(aw<6BPTXEcY1z%FIL+%Jh+WFeaD>=k#fC^o`+iR( zM|_@sy67FQQNy+kdmKSU2`-rlqV#S?xSPdZXS)T^GN&)s`?Z^`-4faP{>;vQMlN+( z0y%)#jkV^e0|=t3K3!u>T!=D$NRJ9Wh^qLKKoIJ=)zTo$!?g$Hpz?=pQ*dRGvN`)x zjZf+RDmdW$Pp@N`7h}Ya^h(!;U8Tu{`6%7Wu_NA9z%D}6*ZIn$OF~$LCX<&zgBvEG|(nD8F=DHYY#mA z%kQ)E`9U{WeLYcS6u4suvEVnkJ~Qg+q1Bg>wsOzNMue&>1%IKR)F^q@g=)Z7QDzS-DBmQJxvZ%1BjSK2jy)>_<9x%e_LrS|9`UzG`Dh8;HC1ErZYOfV#+>~ zUfzoPF;LcGi``Tsej^GAyPcT#L&JI{b0YQSgL}SRDb^;6btYKIuqYK8i4?|$d<=sK zY4w+(4$&^aDNm{ON;M+}{Oi;IdD+N0)e+!qm}Tbv`ZkuxBy%!{u)^=s1B;IR+!KLE zgN~Z-EOIwv^F^6z=W5I5=+DF!;T!lGK24GN!BHLlQL7Abdwq=An0ytGZ2+ zpY^DYSVLCM!o{)Qqq_@H=)}J~?Q`=bI&~cD15irI_UB2-luc_uSd(En4^a(W@UBlR z%D%_5fyUOrn_*o%$M*SHv5Olb!VbW3S&Y~py?fpo4rJ&B@O)*pzjUx8Q+Eh7hVVak zHg{jprNs|ym(t#Gs|%&N6v<0>@4yAJxJRbXQmi3d_cuG3Z)Y^g2&2BK&EJI0+nTw% ze5^}$8aJ>AGALvcN#tZtFMJsFx>U=gMR@1v%)-s783b))K?c51Q zCWJT|Y9G^E&)$K_juYR5>7%$^l z3EFUx&Ef{HcgbNAA3xtbI7dAVoVM7`pq3E93~ohzSQL?80Kc0qvV^Pf8Ied z`^Gg}n8KVX)e1!c(>F%KT9&W~b`6M6k%1)|jR3c$lm;Pl; zTNF{s0kdwcA|Ul>en!yB@2}YaLNoDeQD0ri{4P@#Y4_H;j_D?)n;>*g!u6}u7k766 zd>(96I#!9I4%1bsj6$Tg5*2Ob9ay|9>vU@vxmQ98yW9TSx%wy=A}$$Nu1N-u+)s(Ie@Gd8S6a97a@0%jmvS!+vu9lMu!WzPo6+@d$X+jB4V?({YGbc( zD)}Mt6Zsoa*p4vtLf;A$1IcrcDww;I>`;|^`xMVKhkC)nU_}bggUQ* z3;Lgs$u>V)FLd;-OHI;@f>lzaF|%+?H5JPGD%zB;v@k`H!7f8y8Ri&^(z=zpZIfkQC~OD5C-BgyW+m~2+ce}u#48#s*ce=@o}jloH>k)YrgDeM4cs&NL2L5Ba%SNK@dnI z%^n5dCfH-fpXrjE&2vHOL!k&q7Kf%kSCHgKBT-ba7J(4kT^O-uQ z3ySehF++&)uFeKtee(QC_I{)REbBv4@$Yv*#jy0tNHC}wDJ|-$79{74+N9``KU^3I zIpq2Yh;qNnD8SE2EcP=XA za))Fk;GaGy^D6U)bPI_p?qWA(A-h_9hT>=DTr{1OZ4zgi)__DwSsi>Z5%<@+L=D+w zRF=lSb`Z9~&X+<;-ZC24)nGW@{8}5Xl((WxW3qoltE4VKKtdHDKKDehnMha0_4N$a zxz28%COb@dd2X0vB?MGop$?QRdB?g$Z$WCtXB8d)8gM!DgMRH7s18MZy}^I=dmzh; zzwGKa8lL*?=$XfAlVs^GQC{6g+ekcxQv9=XG^sy4 zA>csd<$Cn&bz)Z7&*h;bt2yN_-A6D6v~^zlAgy>2^iS}m zAg;KE>sQ4*%=GYKFyYxycEXp|+ugfa2NOah?uAyGpPyOk>sH%I@4pX@%QUxm68l#k zC|Kxi?WPy;Jt3JayddHPQAmU8=LRRQNuX(b~Lqr#NCt z1R5j<>uybfL{Hg{i>2u`2R{d*EHoRJOT{`}0sal&S;x@`Ze*?Q;HB?5Di0bapxPCG z3iaMoR-WeXq58@;hX`kS$M%}jon8%k_O7#S#<|rj8)J(#_30SUy_=(h#t(o=b zj9ejZI7Jh>#Zg(8yCR9+Vj8~`;XAPSf%@h60_e#who0uQljdJHI+sv0r;8MmpZZJ| zIYon{ln!(=JmGrzZKz@ym2dkI3WPiMKK*S>SWw$gkNv?^E+od=zh`}YS*hjH`i^6xi+|XIvpD1^BMw>1!82}Y)b=NstN?*^S46M9 zBLevs%v88G^3H}n%ppw*vCr@tjD)Ar`yWKcS+!^Hz4Qp&#&>sRWH{evSkoPbNLMbn zrbMbm_IM<0%qVO9!IA$h!%^N}0~iPwiivW4vj0 zlUfc}Q>$9{u-|QY7ddMUkh?qY)A-Sh7|ysIOwoaURnU!Bgc%Sx1PP*OFcE@CLKzjJyQihN2~Le~6n@|jEA%QVNO zvt0-0w9d0@*BvxOD~bVY`c53X0TFDRehR$#3B$eMPBNKI{fgAIUv_HzPlLg6L!*8( z8ScO#H_Tjg!?p-p@dbKaQ*BKJlGAYE%1c)&bib$JczbZ*k6`n_wdvmlTnhelyU{Sv z?(NZid&bYnI|^-|RWE~{&jWMf9G4Z;Vg^UU<`94^rP&8R@J5G`igsp8xWlGrsm`LX zT~qHo60`FOwy`TG7_n9a;x#GCghiff!FggazMp73y@w7-X247J>FGk#;40FF&M_FnF^lNQw0QXqxga|IaZK8Fpb!03*#4IUbkjdT5`*k5O$ zOyqp)k<|0hYNYI-5QvT0uxm|6gk9N;37L9MamAv>wRI?bBYKkLpiu^ zKAGF&j>v)vUOG~?K`oV3tGM%!N0IU69=e528406erFQA$cz~3CD^>N#g@}RH#8sn^O_~O_0G!f7GnNi2swOzpw)d10I*{{E(lrn zvei3?8`M=utkhW%=yqz|3eft3K%L;Asve7HC;IXXP^2oMN?j%t!C{zECEMnrFRxxoC zJsi?^y@^wzY`cvAPQjn6Y_ro&C|B1Ml$7R_#R~k~7!L!+=uoy=y`PVdpXxOur(eFi zOQlC%V3aXVfc(lzul&Qfd-s4>IMHfxB@xNwRky+=q{swDvRw4|!-$>r?Kn}HbGk-f zyJa18lzc&aw)4$J@pRD|b4Gcx-imyj5!=-W87ht2_6Dj`<+R% z$oK1*x>?~0fh?R^o2IDps&A?sTBZ^BW0ZhY9B$J=sR#S6MwMMZNKT2txdeL}LBRJW zCiM;g9BQqfAY!pa(OJS`^#uNCi>8i`bg_vq(^IDeb*t*&9j@<#i_`=oQ~BaBO2$A~ z{Pm5(E0`rS%QFFRyAEj_Fp22(mk*L1MG#JF#_LK`N~HO%04hF^9sE~U;X`AlDv|QJ zh06>fgW1e+(fJ;4;$UJc<7eJ`AJO3O6kt-fi(l1-%Wp3498B0DW#E9cQz4Qzb4;D@ zfyhQf_5Is_f=xM(&g)pq7XBUiJV*SWOS=)mSo^+D!#vSVD_|w|netOTFWs0oY6=ZG zsTR%27J&5JIYCA4G6{WzG=^`xM-lf+f~Auk&=DzP-!cnStq)#mcel~&EvPnTIs+^p zcmDDl1Z%T^eJgRYfz!jw48Ha{J* z!y_T12?%wZe9eESgn0Gc%TEOf=0xMo#8znr-DDjIX1RrRc?o2!T4bU`(Cw7=j{PI; z0opyBqc`@5%kU1=!{oM-g6V2_Z}jr_n}3 z8QS8~{92sKjTRRE`QjPo>8~FW;2g}RBiD}$L$S&hD>r?&bs=0UV?ANB) zD%9a`TJFgal%WSbE?wo^*+Hg>45-j7Hsmz^qIb>q=5TVhYBmKUMX_hMPXXiA0KCBQUm5bdlT5`v&dYspGnL{$YzH`Xf=uE6+ zy}Q~cR(_D;6aI0!l_`i-hbGn`KNtWf8=U#1{xbIreyL&&ef4^sMZ6$g6eR2Q*BqyV(rzt}J^|tOzgOY>7?u#}F zlt@&}S1l=KE~IyfXq_a+vU6PZFvA4aW%wkGlT|vY!3zx}q6Da}EavFWK2On_`={RI zo`#)hTr;LTmN%!7XRoSz|Bn$(FPsN1mYinO!)DA0Mx=C zH0-ZMnTUiQ^6VmuZk$$~`qX5^)vgJAYDc|LyrWMi&cWy_{ns|$eWzPj3RMKVD@Pqw zK0FfbS2J)G7-%2$!U_KUQu3?#A~fx0;97DrZ7S~qI_q=CU*NjshGX7iQQ_dMk?dgm ziQCjWBS!8vVGc{H1^JB^F>TwQY7)~-s8S#g_liW(yFV*|lqBF#xvEq2BUsNzKBi?z zcdH>!(DbwPn&BmizgqsrEs==}XPTH(3O1b0;M!FAeTjA4RTh-l%eOJ#(YBCgc)SNT zu^*}NbgScj`#;8zQS(3}KlI8z$9gxy@`K31*)2aC=j* zB56NO2f%}^xGKv}<{nPMQ5jua<+MI8?}4U9#2k#WixJfS{5TR%>egq{6&-z!j6aYHmy)o@@D1J^ z{eItrwDSRvrrP5Ai(IqaPg{H-o({WZ)l`8_74n11!oour)%>{y0LM1?`EyJ`+ctcQ1_1Z_4#w^o3FxDb~D zaHgKz2C2gNqT*~LhWMV#3mERuX1Ee(M- z7Gv};#Bie|ZE^XpqVjh_wkjSv{1Mt;v6C(n|JNS=Byy~{z^|OzEBbkQB~u9^8Gp&( z+k;;ARw8})&jwgWBz9-qD&}IBma>$e=(J-tSM24>7O&~ zA5)1RXZ_Lm6Rm!#hzZ{e{;dk`A`LaJ-(rT%)$;e4Y0jONQ~jCze`U@8A6U9`2id%I zEzYuj&lU79WnfYX6>ni&eaOhUy#P-wZ9V_rDBjAUYzTp2-Gcg!KN9g+I67WS_Hz6x z=(m@%MM;E>2!==w^wN%xv|k_L)DO`=IO#w zB#bF?pv`kCr7U#uitR?&*I5F#kmt< zR@B#CIMsfq5p*f!hC5Tso8_xofzPMfcb!ATA6|vcUC;8z(AS6O4h0j(yU)gHrf|^mEuVF&|(9QK-Hon!$Pv z>`FbNBklwIU9Pp6_iTZ75xXHyt??VUCl+{3Y)6V22Iv?Dtl0MS%E=MxCl>C8S5D@r z#VvMztq(nS1kS_PiV-1HDJc9+tU`T*n}u%W0VR^<;Kwqm0;IM}icy$5Pv=}@{N=YGdHif1>E+RkyGdMBtWt> zB)XT^Y?$*o8-L7Tlz`MOh~m!c!6D;Hq5%)Cb#@)kguF!^4=GGjN>a~gv?~a$cH>2^ z?oI@@_!x**=NhK4n(tZ?DQ8y-aK<-sDw zLViM)D7sIwn5Tld|P!;J2NkC#F_;O{U4 z;CoEZKD>~#G~}&eIYf$yrO~_ZG}mwfG$j#d$Nhy7)79D3v9GXvgKP4Ganjd8u7b_h z*7Y39s|s?HGSI~+U|21=>&gj1kuUb8tuhrxlNDy`WMIK`DmhBuz>y69ii~ZjqGUO! z#JrdH?ULrlB((!c$1m*cvQmq^V-8h_#klNm=4_?>md^x-3|E6|K3r5PLl$R=Rzrie zW70)>2ppSE)uLgIx=x3F^{!&CK|MHTq}I5?>OBxK?Ay3xkcviL{g{vOp9mh{1rxt0;*sHi^i5=kkb;KK~jMa>r z+(kR%@{nFqEC@>${V=qF-SH6DQG!X^o7ArLO5v-Xc^`GfG9r*-D@|fL*6OLPOt;#z zpfsRV)o~vAqx#LhEc_S$e(_jZ*_J+IG;AhYOE0tpinxm`B*0q1h8vxe&xwL9dkJ?P z$F@JN-poHnLWBA$8MO$HTfdmkv&P4m(YZC9+^M1L43QXEO=a@E4#AS=pdNKE53 z+%6;?=1~xlW8^k{J0;7J432Y-k~i+LFN^@Oc2ck2jd>TeAV*lM<@KnSjlu=JHtN1{ z;fYI#_QOpale;qS*fQwXuf2ik|xC?Kfd<9CU78=*PyV-P@8wI%Eu_O~l-2 zW3t4-DPJVOyi8Zs@~gNhKC$MLQ7#Yw*I`2wp{jUWYA%?i1^o{6kA$nEP|9QUK+=k^MZ+k z~Zy@Og;4k379vdM_VEj?rd$?-{pn{Yj7@debbxZ%$F8OX9t5=D>T8 z^7-fB!ZwpHVh#cZ8qEjo@oNXK#f~2p4u~GDc66?TD?AXHFwQ$JO@Qa^&H%tG{kd~C z4rC(991r;j;C(JizW30{OK_o?XqL#G(@aPFPAD-I z$*Gfhz9u(2=P5*r%8e5244xpA99uWU#b_53p_CKN+5WaZC!PQDP4{MVRN5*!y&wGY zhlvIXIaQYs3CwM;Mli+g83`Ru@0<9{q@c&{aW(LlTV97F?9!!*-YMh#ku;Veq))5) zcG#`Xk|nn?lj)7N=z(V~J8Ly8S~ftJsd>ZG@)HKzjubUf(tw1Kp$d2f>m3j0OHa(& zMTg+z>myQXkxqW5m!eOq`-|rnF!uVacL-EOXsh)oSgGpHX?jwuConhpxRf&FQD@$V z+1eOXx_=a@zeipyB8;Nr80^F1vPdM2ruI)g1ozs#%Xv2-DvlUbvuG(RGCxGbpN)-BK^WzX?e z9Sx~qsmGfFWo>m;s|3*OHkBWnZ$Aa=T|XD^7v~>+P+*U!yKD|EI4Y{sI?*h2X(o`R z1)<~CTz26C`S726>UqW?PIF?9S~F_abT_aErosek+TN5)D=xMrI5sEdba z6F#~269S#D8R6IN>ooMmaEg*i zl^!D)@tOJJB~o%ffU1vrCbE8xkmNPDr~$P`$}4++x1|@M*8OmOifd83WolHilWtI5 zqijAMEkCgLZX?9T$#?O)L+xs2>1aaxfk0sxvP?_wn&6ISD2z%4X^Q#U&5OfQY;1$# zhXNG#Y!bX|Js5(u;#tkDr^M^TL_#2|w00EmI;F#-7crBwDv9&RGNPhqD+7cPxS70; zeb6Kk&`Ec974uQX+NqW-;?a4Ie+`bxO+=HG{&Rx)#dg0U$F#tchM4R{3n(_zemVsj z)$};pc$#pWt;pnt#8Y(Ki@X+_ycYe|G;gH^V{vuks1I%A;ts%fc@P7 z00yhn?O@6O${@n*QZaMJ?Rmn*%48jn#607gITJb$O1+DfYd?lv9u*NQ+iSewERIt8 z$ExRxk1u76-)DZy zw?Zq5#wv^t05H6%s+QZE%EjVzpmGlpqoVG9M*w^J;!-Xo0Fty5JgB^i8_*8|T!CisdVF3~WMk?&P5p&iR_*G}O}YN3e^io3K* z@6&YuLf{8N?Bu7mT?xk`C)8NvALImPpN;MTbORdL@5Cuy7N~v>#_E)o=GK^FcT{vZ zp>w%3Go1b60FgJeUJXp?@pr&Z&c0gG8$xd?2svMf>$$maU*G0zs>3_NA9$IT!%j#ATWW*z-n!DO!NtjMipD2cRVMrJY8Ot$zG(kYq^c1rHu zcQfvt7r35%HYrJ#+RSPk!R^e2X%7DJd_~k)>89uug{O%K}%dsYLy&WqOCD#zmcmu#OS&@QUTY)v@^M u2UVPQhnrDR-vct#-vLx0>2EL~7f&4MKFgyqo0e@xmTfF+ZQQ;;0Dl99l1w)M literal 0 HcmV?d00001 From 53054d3f49cb0600610d1d74c272fa089d1b08b8 Mon Sep 17 00:00:00 2001 From: Rj98-sh Date: Thu, 11 Jun 2026 05:00:31 -0400 Subject: [PATCH 2/3] Update uninstall-rocket-cyber-agent.md --- docs/vsa/procedures/uninstall-rocket-cyber-agent.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/vsa/procedures/uninstall-rocket-cyber-agent.md b/docs/vsa/procedures/uninstall-rocket-cyber-agent.md index 7980bbd3a..e824efc4c 100644 --- a/docs/vsa/procedures/uninstall-rocket-cyber-agent.md +++ b/docs/vsa/procedures/uninstall-rocket-cyber-agent.md @@ -9,7 +9,7 @@ tags: ['antivirus', 'application', 'uninstallation', 'windows'] draft: false unlisted: false last_update: - date: 2026-06-09 + date: 2026-06-11 --- ## Summary @@ -23,7 +23,7 @@ This script performs a complete removal of the RocketCyber Agent from Windows sy ## Implementation 1. Export the agent procedure from ProVal's VSA RMM instance. - **Name:** Uninstall - RocketCyber Agent + **Name:** `Uninstall - RocketCyber Agent` The export will download the necessary XML file. @@ -38,11 +38,11 @@ This script performs a complete removal of the RocketCyber Agent from Windows sy ## Output -Script Logs +- Script Logs ## Changelog -### 2026-06-09 +### 2026-06-11 - Initial version of the document From 68c463d568a2026df9bb316a8a3d98d4af1e8782 Mon Sep 17 00:00:00 2001 From: Ovais Rashid Date: Fri, 12 Jun 2026 12:16:58 -0400 Subject: [PATCH 3/3] RockerCyber --- .../uninstall-rocket-cyber-agent.md | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/docs/vsa/procedures/uninstall-rocket-cyber-agent.md b/docs/vsa/procedures/uninstall-rocket-cyber-agent.md index e824efc4c..cb095e41d 100644 --- a/docs/vsa/procedures/uninstall-rocket-cyber-agent.md +++ b/docs/vsa/procedures/uninstall-rocket-cyber-agent.md @@ -9,12 +9,20 @@ tags: ['antivirus', 'application', 'uninstallation', 'windows'] draft: false unlisted: false last_update: - date: 2026-06-11 + date: 2026-06-12 --- ## Summary -This script performs a complete removal of the RocketCyber Agent from Windows systems. It stops agent services, deletes uninstall records, and removes all RocketAgent files and directories. +This script performs a complete removal of the RocketCyber Agent from Windows systems. It stops all RocketAgent-related services and processes, removes associated uninstall registry entries, and deletes RocketAgent files, folders, and residual components from the device. + +The script is vendor-provided and is intended to ensure a clean uninstallation of the RocketCyber Agent before reinstallation, troubleshooting, or device decommissioning activities. + +### References + +- **RocketCyber Documentation:** `https://help.rocketcyber.kaseya.com/help/Content/deployment/how-to-uninstall-rocketcyber-agent.html` + +- **Vendor-Provided PowerShell Script:** `https://help.rocketcyber.kaseya.com/help/Content/Resources/Documents/rocketagent_uninstall.ps1` ## Sample Run @@ -29,13 +37,6 @@ This script performs a complete removal of the RocketCyber Agent from Windows sy 2. Import this XML file into the partner's VSA RMM instance. -3. Export the < Name of the ps1 file > from the ProVal's Internal VSA. This is also placed under the below path: -`Manage Files` > `Shared Files` > `PVAL` > `rocketagent_uninstall.ps1` - - ![Image1](../../../static/img/docs/71eaf31e-adb1-4fd7-84b2-31ecf4873ac5/managed-files.webp) - -4. Map the `rocketagent_uninstall.ps1` into the `12th` step of the script in the client's environment. - ## Output - Script Logs