WMIC removal