There are several ways to remove CylancePROTECT Smart Antivirus from a Windows computer but it is normally a two step process:

  1. Remove the license
  2. Uninstall the software

At the end of this article we also explain how to forcibly uninstall Cylance.

STEP 1 – Remove the CylancePROTECT License Using the Management Console

  1. Log into https://protect.cylance.com
  2. Click ASSETS from the menu on the left
  3. Click DEVICES
  4. Place a check mark in the check box to the left of each device you want to uninstall Cylance PROTECT from
  5. Click the red REMOVE button from the top menu
how to remove CylancePROTECT From Clients using the Cylance Management Console

STEP 2 – Uninstall CylancePROTECT FROM THE CLIENT

2A – Uninstall CylancePROTECT Using ADD/REMOVE PROGRAMS

  1. Right click on your START BUTTON
  2. Select APPS AND FEATURES from the top of the context menu
  3. Click on CYLANCE PROTECT
  4. Click the UNINSTALL button

NOTE 1: Uninstalling Cylance this way will NOT remove it from the Cylance PROTECT Management Console.

NOTE 2: A reboot is not always required to complete the uninstall but it is recommended.

2B- Uninstall CylancePROTECT Using Command Line

msiexec /x {2E64FC5C-9286-4A31-916B-0D8AE4B22954} /quiet

NOTE 1: Uninstalling Cylance this way will NOT remove it from the Cylance PROTECT Management Console.

NOTE 2: A reboot is not always required to complete the uninstall but it is recommended.


How To Manually Forcibly Uninstall Cylance Protect

Manually uninstalling Cylance Smart Anti Virus without the unlock code or removal from the Cylance Management Console should only be used in rare and odd cases. For example, in one such case we read about recently, the company was hacked and their Cylance tools were destroyed… that is a good time forcibly uninstall Cylance from all the desktop computers and servers so you can start again.

BEFORE TRYING THIS MAKE SURE YOU BACKUP YOUR REGISTRY

  1. Launch REGEDIT.MSC
  2. Take ownership of the Cylance registry hive:
    1. Expand HKEY_LOCAL_MACHINE > SOFTWARE > Cylance >
    2. Right click on the DESKTOP key and select PERMISSIONS
    3. Click the ADVANCED button
    4. Click the OWNER tab
    5. Change it to from SYSTEM to a DOMAIN ADMINISTRATOR
    6. Select “Replace owner on subcontainers and objects
    7. Click OK In the Security Tab;
    8. Click on Administrators Enabled Full Control for Administrators;
    9. Click OK to finish

Now you can change their special keys that lock Cylance:

  1. Delete the “LastStateRestorePoint” Key
  2. Right click and add a new DWORD32 key into HKLM > SOFTWARE > Cylance > Desktop named “SelfProtectionLevel” and set the value to 1
  3. Reboot the computer

Now you can manually uninstall Cylance:

  1. Start SERVICES.MSC
  2. Stop the Cylance service
  3. Open an elevated Command prompt and run:
    msiexec /x {2E64FC5C-9286-4A31-916B-0D8AE4B22954}


4 Comments

Shivan Missouri · March 5, 2024 at 12:18 pm

“How To Manually Forcibly Uninstall Cylance Protect” after executing the last step, a pop up message say “The action is only valid for products that are currently installed” what should I do? I know it’s installed because it still gets in the way of my install for the new anti-virus.

Brandon · October 31, 2023 at 3:49 pm

When I reboot the computer, it changes the owner back to system

Thomas · July 10, 2023 at 3:42 pm

it says i have to sign in but i cant sign up

    Ian Matthews · July 10, 2023 at 10:50 pm

    Hi Thomas; You may have to read the “How To Manually Forcibly Uninstall Cylance Protect” segment.

Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *