Sentinel One

Hello MPMP10.
I installed Revo, which successfully uninstalled SentinelOne Agent. Thank you very much!! :-)
However, I still have an issue: it still appears in the task manager. When I try to "end task," I get the following error message: "Access denied. You need administrator privileges to terminate this task. Close the manager, then run it as an administrator and try again."
I logged into my administrator profile, launched Revo (which still found nothing), and opened the manager, which indicates that no tasks are running... I don't understand.

Hello,

We can try to finish cleaning the traces:

Read the entire procedure before posting the reports

--> Download the FRST version of Farbar, compatible with your system, and save the file on your Desktop

--> For a 32-bit system
--> For a 64-bit system

How to tell which version, 32-bit or 64-bit, is running on my system?

--> Wait for your browser to offer the download for saving, without clicking anywhere, especially not on the sponsors of the page.
--> Close all applications, including your browser
--> Double-click on FRST.exe and click Yes to accept the Disclaimer
--> Under Vista, Windows 7 / 8 and 10, you need to launch the file by right-clicking -> Run as administrator
--> Wait until it indicates The tool is ready to run
--> On the main menu, click on Analyze and wait for the analysis to complete
--> At the end of the scan, the reports FRST.txt and Addition.txt are created. Post these reports in your next response.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs

--> The SmartScreen filter may trigger an alert. Click on Actions or More information then click Run anyway

---------------------------------------------------------------------------------------------

The reports FRST.txt and Addition.txt are expected

All reports must be hosted on https://security-x.fr/up/ and you indicate the links obtained in your response

--
Security Contributor.

Good evening MisteryBean.
I followed your instructions.
Here are the links: https://up.security-x.fr/file.php?h=Rc3291eabe83780a5842ba7aa6be43621 (FRST) and https://up.security-x.fr/file.php?h=R3d309b2b3ba69d67c9b986d9f63dad32 (Addition).
I will restart my PC and see if SentinelOne Agent is still in the Task Manager.
Thanks, anyway! :-)
---
I restarted my PC and SentinelOne Agent is still in the Task Manager...

Hello,

I'm going to restart my PC and see if SentinelOne Agent is still in the Task Manager.

FRST is a diagnostic tool, it doesn't alter anything on the PC, so it's normal that Sentinel is still there.

As bazfile said, you need to log in to an administrator profile (valer_ur8arpb).

Once you are on that profile, run a new FRST scan and post the new reports.

Hello MisteryBean.
I tried from the admin profile: nothing at all in the FRST txt file.
So I went back to my user profile, running FRST as an admin (via right-click). I do have a FRST.txt file, but no Addition.txt.
Here is the link: https://up.security-x.fr/file.php?h=R566c067346758437dbd2bd50b3bea4b0

OK, it worked! :-)
Here are the links: https://up.security-x.fr/file.php?h=R1a539e44593a99468893d405e677e657 (FRST) and https://up.security-x.fr/file.php?h=Rfa367b7ea19f1d024423ff04a58d9144 (Addition)

RE_

Still in safe mode with networking, do the following:

--> Download the FIXLIST file to the same location as the FRST program (FRST64) <= (Important)

--> Open FRST (or FRST64) as an administrator and click on Fix

--> Let the tool work

--> The PC should restart in normal mode.

--> A fixlog file is created in the same location as FRST, post it

--> Let me know if you still have the problem.

-----------------
-------------------------------------

You don't have much space left on C:, so system restore is disabled.

WARNING: System Restore is disabled (Total:117.15 GB) (Free:15.26 GB) (13%) 

Check after rebooting in normal mode, how much free space you have on C: and Re-enable system restore

Hello MisteryBean.
Here is the FIXLIST file: https://up.security-x.fr/file.php?h=R7eb09ebcae8d430be429e7f66a80cc10
Here is the information for the hard drive:
used - 106,855,247,872 bytes - 99.5GB
free - 18,936,119,296 bytes - 17.6GB
I no longer have SentinelOne in my task manager!!! :-D

RE_

OK for the fixlog.

free - 18,936,119,296 bytes - 17.6GB 

It's still a bit tight, you should see if you can move your personal files to an external drive. After that, 120GB is a bit tight with Windows 10 and a few installed programs, I think in the long run, you'll need to change the SSD/HDD for a larger one.

Have you reactivated the restore?

-----------
-----------------------

For the remaining files/folders, you can indeed delete them manually, but make sure of what you're deleting. Otherwise, you can leave them, they won’t interfere since they're no longer active.

------------
----------------------

To automatically delete all files/folders created by FRST and the tool itself, rename FRST/FRST64.exe to uninstall.exe and run it.

The procedure requires a restart

Good luck :-)
--
Security contributor.

I don't have a recycle bin/trash via right-click... :-) I also checked "send to" just in case. But it's not a big deal, as long as it's no longer active, that's enough!

For the recycle bin when you want to delete a file or folder, it's right-click and delete.

A little addition to what has been said:

FOR INFORMATION:

Your version of Windows 10 is not up to date; to check, go to this page, click on Update Now, this will start the download of the Microsoft tool, just open it and it will allow you to update Windows 10 to the latest version and tell you if it is compatible with your PC. Be careful, this update takes some time; if you have a laptop, plug it into the power, as it would be a shame to run out of battery before the update is complete.

bazfile
Moderator/Security Contributor.
A greeting, a response, and a thank you are always appreciated.