SOLVED: How To Uninstall Cylance Protect Smart Antivirus

There are several ways to remove CylancePROTECT Smart Antivirus from a Windows computer but it is normally a two step process:

1. Remove the license
2. Uninstall the software

At the end of this article we also explain how to forcibly uninstall Cylance.

STEP 1 – Remove the CylancePROTECT License Using the Management Console

1. Log into https://protect.cylance.com
2. Click ASSETS from the menu on the left
3. Click DEVICES
4. Place a check mark in the check box to the left of each device you want to uninstall Cylance PROTECT from
5. Click the red REMOVE button from the top menu

STEP 2 – Uninstall CylancePROTECT FROM THE CLIENT

2A – Uninstall CylancePROTECT Using ADD/REMOVE PROGRAMS

1. Right click on your START BUTTON
2. Select APPS AND FEATURES from the top of the context menu
3. Click on CYLANCE PROTECT
4. Click the UNINSTALL button

NOTE 1: Uninstalling Cylance this way will NOT remove it from the Cylance PROTECT Management Console.

NOTE 2: A reboot is not always required to complete the uninstall but it is recommended.

2B- Uninstall CylancePROTECT Using Command Line

msiexec /x {2E64FC5C-9286-4A31-916B-0D8AE4B22954} /quiet

NOTE 1: Uninstalling Cylance this way will NOT remove it from the Cylance PROTECT Management Console.

NOTE 2: A reboot is not always required to complete the uninstall but it is recommended.

---

How To Manually Forcibly Uninstall Cylance Protect

Manually uninstalling Cylance Smart Anti Virus without the unlock code or removal from the Cylance Management Console should only be used in rare and odd cases. For example, in one such case we read about recently, the company was hacked and their Cylance tools were destroyed… that is a good time forcibly uninstall Cylance from all the desktop computers and servers so you can start again.

BEFORE TRYING THIS MAKE SURE YOU BACKUP YOUR REGISTRY

1. Launch REGEDIT.MSC
2. Take ownership of the Cylance registry hive:
   1. Expand HKEY_LOCAL_MACHINE > SOFTWARE > Cylance >
   2. Right click on the DESKTOP key and select PERMISSIONS
   3. Click the ADVANCED button
   4. Click the OWNER tab
   5. Change it to from SYSTEM to a DOMAIN ADMINISTRATOR
   6. Select “Replace owner on subcontainers and objects”
   7. Click OK In the Security Tab;
   8. Click on Administrators Enabled Full Control for Administrators;
   9. Click OK to finish

Now you can change their special keys that lock Cylance:

1. Delete the “LastStateRestorePoint” Key
2. Right click and add a new DWORD32 key into HKLM > SOFTWARE > Cylance > Desktop named “SelfProtectionLevel” and set the value to 1
3. Reboot the computer

Now you can manually uninstall Cylance:

1. Start SERVICES.MSC
2. Stop the Cylance service
3. Open an elevated Command prompt and run:
   msiexec /x {2E64FC5C-9286-4A31-916B-0D8AE4B22954}

---