ThreatDown Endpoint Agent
A way to uninstall ThreatDown Endpoint Agent from your system
ThreatDown Endpoint Agent is a Windows program. Read more about how to remove it from your computer. The Windows version was developed by
Malwarebytes. Open
here for more details on Malwarebytes. The application is frequently located in the C:\Program Files\Malwarebytes Endpoint Agent folder (same installation drive as Windows). You can remove ThreatDown Endpoint Agent by clicking on the Start menu of Windows and pasting the command line MsiExec.exe /X{949D1792-E377-4348-8BC4-6D643EF49B21}. Note that you might get a notification for admin rights. ThreatDown.AssetPro.Launcher.exe is the ThreatDown Endpoint Agent's primary executable file and it takes about 5.75 MB (6026896 bytes) on disk.
The executable files below are installed together with ThreatDown Endpoint Agent. They occupy about 37.16 MB (
38967536 bytes) on disk.
- ConfigurationRecoveryTool.exe (46.84 KB)
- EAPluginHost.exe (4.03 MB)
- MBCloudEA.exe (3.58 MB)
- ARSLauncher.exe (513.70 KB)
- Timeliner.exe (4.92 MB)
- ThreatDown.AssetPro.Launcher.exe (5.75 MB)
- createdump.exe (65.30 KB)
- EAServiceMonitor.exe (4.51 MB)
- wa_3rd_party_host_32.exe (2.22 MB)
- wa_3rd_party_host_64.exe (2.80 MB)
- EAAssistant.exe (401.07 KB)
- EACmd.exe (205.24 KB)
- EATray.exe (8.16 MB)
...click to view all...The information on this page is only about version
2.0.0.254 of ThreatDown Endpoint Agent. You can find here a few links to other ThreatDown Endpoint Agent versions:
...click to view all...
Some files and registry entries are frequently left behind when you uninstall ThreatDown Endpoint Agent.
Directories that were found:- C:\Program Files\Malwarebytes Endpoint Agent
The files below are left behind on your disk when you remove ThreatDown Endpoint Agent:- C:\Program Files\Malwarebytes Endpoint Agent\BCrypt.Net.dll
- C:\Program Files\Malwarebytes Endpoint Agent\EAControllerDomain.dll
- C:\Program Files\Malwarebytes Endpoint Agent\EAPluginHost.exe
- C:\Program Files\Malwarebytes Endpoint Agent\EAService.cat
- C:\Program Files\Malwarebytes Endpoint Agent\EASysprep.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\EAEngine.cat
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\EAEngine.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\EngineIoClientDotNet.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\Google.Protobuf.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\Grpc.Core.Api.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\GrpcDotNetNamedPipes.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\MBEADomain.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\NebulaCommunication.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\NebulaExclusions.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\NodaTime.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\Polly.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\Quartz.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\Quartz.Serialization.Json.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\SocketIoClientDotNet.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\SQLite.Interop.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\SQLite.Interop.x64.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\SuperSocket.ClientEngine.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.Collections.Immutable.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.Data.SQLite.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.IO.Compression.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.IO.Compression.ZipFile.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.Memory.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.Net.Http.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.Runtime.CompilerServices.Unsafe.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\System.Runtime.InteropServices.RuntimeInformation.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\SystemWrapper.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Engine\WebSocket4Net.dll
- C:\Program Files\Malwarebytes Endpoint Agent\InstallUtil.InstallLog
- C:\Program Files\Malwarebytes Endpoint Agent\log4net.config
- C:\Program Files\Malwarebytes Endpoint Agent\log4net.dll
- C:\Program Files\Malwarebytes Endpoint Agent\MBCloudEA.exe
- C:\Program Files\Malwarebytes Endpoint Agent\MBCloudEA.InstallLog
- C:\Program Files\Malwarebytes Endpoint Agent\MBCloudEA.InstallState
- C:\Program Files\Malwarebytes Endpoint Agent\mbcut.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Microsoft.Win32.TaskScheduler.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Newtonsoft.Json.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\7z.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\7z.sfx
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\7zCon.sfx
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\7zS.sfx
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\ARSLauncher.exe
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\ARSPlugin.deps.json
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\ARSPlugin.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\ARSWindows.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\EAInfrastructure.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\Google.Protobuf.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\Grpc.Core.Api.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\GrpcDotNetNamedPipes.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\mbcut.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\Microsoft.Extensions.DependencyInjection.Abstractions.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\Microsoft.Extensions.Logging.Abstractions.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\Newtonsoft.Json.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\offreg.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\Swissarmy.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\SwissarmyShim.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\System.Security.Cryptography.ProtectedData.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\testlib.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Active Response Shell\Timeliner.exe
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\EAAssetMgmtPlugin.deps.json
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\EAAssetMgmtPlugin.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\EAInfrastructure.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\Google.Protobuf.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\Grpc.Core.Api.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\GrpcDotNetNamedPipes.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\machine_info.json
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\Microsoft.Extensions.DependencyInjection.Abstractions.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\Microsoft.Extensions.Logging.Abstractions.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\Newtonsoft.Json.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\NodaTime.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\System.CodeDom.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\System.Diagnostics.EventLog.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\System.Diagnostics.EventLog.Messages.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\System.Management.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\System.Security.Cryptography.ProtectedData.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\System.ServiceProcess.ServiceController.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\ThreatDown.AssetPro.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\ThreatDown.AssetPro.Launcher.exe
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Asset Manager\ThreatDown.WindowsUpdate.Interop.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\BGProxy.exe
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\cs\System.Private.ServiceModel.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\cs\System.Web.Services.Description.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\de\System.Private.ServiceModel.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\de\System.Web.Services.Description.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\EABGPlugin.deps.json
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\EABGPlugin.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\EAInfrastructure.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\es\System.Private.ServiceModel.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\es\System.Web.Services.Description.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\fr\System.Private.ServiceModel.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\fr\System.Web.Services.Description.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\Google.Protobuf.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\Grpc.Core.Api.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\GrpcDotNetNamedPipes.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\it\System.Private.ServiceModel.resources.dll
- C:\Program Files\Malwarebytes Endpoint Agent\Plugins\Browser Phishing Protection\it\System.Web.Services.Description.resources.dll
Use regedit.exe to manually remove from the Windows Registry the keys below:- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\2971D949773E8434B84CD646E34FB912
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{949D1792-E377-4348-8BC4-6D643EF49B21}
Additional registry values that are not removed:- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\2971D949773E8434B84CD646E34FB912\ProductName
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Malwarebytes Endpoint Agent\
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\WINDOWS\Installer\{949D1792-E377-4348-8BC4-6D643EF49B21}\
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EAServiceMonitor\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FlightRecorder\ServiceDll
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MBEndpointAgent\FailureCommand
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MBEndpointAgent\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SvcFlightRecorder\ModelsPath
A way to uninstall ThreatDown Endpoint Agent with Advanced Uninstaller PRO
ThreatDown Endpoint Agent is an application by Malwarebytes. Frequently, people decide to remove this program. Sometimes this can be efortful because doing this by hand requires some knowledge related to Windows program uninstallation. The best QUICK practice to remove ThreatDown Endpoint Agent is to use Advanced Uninstaller PRO. Take the following steps on how to do this:
1. If you don't have Advanced Uninstaller PRO on your system, add it. This is a good step because Advanced Uninstaller PRO is a very useful uninstaller and general tool to clean your system.
DOWNLOAD NOW- navigate to Download Link
- download the setup by clicking on the DOWNLOAD button
- set up Advanced Uninstaller PRO
2. Run Advanced Uninstaller PRO. It's recommended to take your time to admire Advanced Uninstaller PRO's interface and number of features available. Advanced Uninstaller PRO is a powerful package of tools.
3. Press the General Tools category

4. Press the Uninstall Programs feature

5. All the applications existing on your computer will be made available to you
6. Navigate the list of applications until you find ThreatDown Endpoint Agent or simply click the Search feature and type in "ThreatDown Endpoint Agent". If it exists on your system the ThreatDown Endpoint Agent application will be found very quickly. Notice that when you click ThreatDown Endpoint Agent in the list of applications, the following data about the application is available to you:
- Safety rating (in the lower left corner). This tells you the opinion other people have about ThreatDown Endpoint Agent, ranging from "Highly recommended" to "Very dangerous".
- Reviews by other people - Press the Read reviews button.
- Technical information about the app you are about to uninstall, by clicking on the Properties button.
7. Click the Uninstall button. A confirmation page will show up. accept the uninstall by clicking Uninstall. Advanced Uninstaller PRO will remove ThreatDown Endpoint Agent.

8. After uninstalling ThreatDown Endpoint Agent, Advanced Uninstaller PRO will ask you to run an additional cleanup. Press Next to go ahead with the cleanup. All the items that belong ThreatDown Endpoint Agent which have been left behind will be found and you will be asked if you want to delete them. By removing ThreatDown Endpoint Agent using Advanced Uninstaller PRO, you are assured that no Windows registry entries, files or folders are left behind on your disk.
Your Windows PC will remain clean, speedy and ready to run without errors or problems.
Disclaimer
The text above is not a recommendation to remove ThreatDown Endpoint Agent by Malwarebytes from your PC, nor are we saying that ThreatDown Endpoint Agent by Malwarebytes is not a good application for your computer. This text simply contains detailed instructions on how to remove ThreatDown Endpoint Agent supposing you want to. Here you can find registry and disk entries that Advanced Uninstaller PRO discovered and classified as "leftovers" on other users' PCs.
Last update on: 2025-06-19 17:39:54.320