There are several ways to remove CylancePROTECT Smart Antivirus from a Windows computer but it is normally a two step process:
- Remove the license
- Uninstall the software
At the end of this article we also explain how to forcibly uninstall Cylance.
STEP 1 – Remove the CylancePROTECT License Using the Management Console
- Log into https://protect.cylance.com
- Click ASSETS from the menu on the left
- Click DEVICES
- Place a check mark in the check box to the left of each device you want to uninstall Cylance PROTECT from
- Click the red REMOVE button from the top menu
STEP 2 – Uninstall CylancePROTECT FROM THE CLIENT
2A – Uninstall CylancePROTECT Using ADD/REMOVE PROGRAMS
- Right click on your START BUTTON
- Select APPS AND FEATURES from the top of the context menu
- Click on CYLANCE PROTECT
- Click the UNINSTALL button
NOTE 1: Uninstalling Cylance this way will NOT remove it from the Cylance PROTECT Management Console.
NOTE 2: A reboot is not always required to complete the uninstall but it is recommended.
2B- Uninstall CylancePROTECT Using Command Line
msiexec /x {2E64FC5C-9286-4A31-916B-0D8AE4B22954} /quiet
NOTE 1: Uninstalling Cylance this way will NOT remove it from the Cylance PROTECT Management Console.
NOTE 2: A reboot is not always required to complete the uninstall but it is recommended.
How To Manually Forcibly Uninstall Cylance Protect
Manually uninstalling Cylance Smart Anti Virus without the unlock code or removal from the Cylance Management Console should only be used in rare and odd cases. For example, in one such case we read about recently, the company was hacked and their Cylance tools were destroyed… that is a good time forcibly uninstall Cylance from all the desktop computers and servers so you can start again.
BEFORE TRYING THIS MAKE SURE YOU BACKUP YOUR REGISTRY
- Launch REGEDIT.MSC
- Take ownership of the Cylance registry hive:
- Expand HKEY_LOCAL_MACHINE > SOFTWARE > Cylance >
- Right click on the DESKTOP key and select PERMISSIONS
- Click the ADVANCED button
- Click the OWNER tab
- Change it to from SYSTEM to a DOMAIN ADMINISTRATOR
- Select “Replace owner on subcontainers and objects”
- Click OK In the Security Tab;
- Click on Administrators Enabled Full Control for Administrators;
- Click OK to finish
Now you can change their special keys that lock Cylance:
- Delete the “LastStateRestorePoint” Key
- Right click and add a new DWORD32 key into HKLM > SOFTWARE > Cylance > Desktop named “SelfProtectionLevel” and set the value to 1
- Reboot the computer
Now you can manually uninstall Cylance:
- Start SERVICES.MSC
- Stop the Cylance service
- Open an elevated Command prompt and run:
msiexec /x {2E64FC5C-9286-4A31-916B-0D8AE4B22954}
4 Comments
Shivan Missouri · March 5, 2024 at 12:18 pm
“How To Manually Forcibly Uninstall Cylance Protect” after executing the last step, a pop up message say “The action is only valid for products that are currently installed” what should I do? I know it’s installed because it still gets in the way of my install for the new anti-virus.
Brandon · October 31, 2023 at 3:49 pm
When I reboot the computer, it changes the owner back to system
Thomas · July 10, 2023 at 3:42 pm
it says i have to sign in but i cant sign up
Ian Matthews · July 10, 2023 at 10:50 pm
Hi Thomas; You may have to read the “How To Manually Forcibly Uninstall Cylance Protect” segment.