uninstall.ps1

# malware-sandbox Uninstall Script
# This script removes the malware-sandbox configuration


$InstallPath = $PSScriptRoot

# Stop any running sandbox processes
Write-Host "Checking for running sandbox processes..." -ForegroundColor Yellow
$sandboxProcesses = Get-Process | Where-Object { $_.ProcessName -like "*sandbox*" -or $_.ProcessName -like "*WDAGUtilityAccount*" }
if ($sandboxProcesses) {
    Write-Host "Found running sandbox processes. Please close all sandbox windows first." -ForegroundColor Yellow
    exit 1
}

# Helper: remove a link or directory created by the installer (App, Data, Downloads)
function Remove-SandboxLinkOrDir([string]$name) {
    $linkPath = Join-Path $InstallPath $name
    if (-not (Test-Path $linkPath)) { return }

    try {
        $it = Get-Item $linkPath -Force
        if ($it.Attributes -band [System.IO.FileAttributes]::ReparsePoint) {
            # Remove the directory link itself without touching target contents
            # Using .NET avoids recursion prompts and does not traverse into target
            [System.IO.Directory]::Delete($linkPath, $false)
            Write-Host "Unlinked: $linkPath" -ForegroundColor Gray
        }
        else {
            # It's a real directory that wasn't a link. Leave it untouched (unlink-only policy).
            Write-Host "Not a link, leaving directory intact: $linkPath" -ForegroundColor Yellow
        }
    }
    catch {
        Write-Warning "Failed to remove $linkPath $($_.Exception.Message)"
    }
}

# Remove links for App, Data and Downloads (opposite of install Ensure-DirLink)
Write-Host "Unlinking App, Data, Downloads..." -ForegroundColor Yellow
Remove-SandboxLinkOrDir -name "App"
Remove-SandboxLinkOrDir -name "Data"
Remove-SandboxLinkOrDir -name "Downloads"

# Uninstall will not remove the user persistent data or any files. Everything remains intact.

Write-Host "malware-sandbox unlink completed. No files were deleted." -ForegroundColor Green
Write-Host "Note: Windows Sandbox feature remains enabled." -ForegroundColor Yellow
Write-Host "To disable it, run as Administrator:" -ForegroundColor Yellow
Write-Host "Disable-WindowsOptionalFeature -Online -FeatureName 'Containers-DisposableClientVM'" -ForegroundColor White