Cylance uninstall

!!!! UNINSTALL !!!!!

This was from our MSP. We had deleted the endpoint in our Cylance dashboard, so it wasn't available to use Add/Remove Programs from the Windows control panel. This is the solution that worked for us. (Be sure to backup your registry first before attempting...)

An offline device that cannot access the console to make changes to the Self Protection Level or Prevent Service Shutdown settings, changes will need to be made manually to the registry to help uninstall the product.

You will first need to take ownership of the Cylance registry hive on the device:

Right Click on HKEY_LOCAL_MACHINE\SOFTWARE\Cylance\Desktop folder. Click on Advanced Click on Owner Tab Change the Current Owner from System to a Domain Administrator Select "Replace owner on subcontainers and objects" Click Apply, Then Click OK In the Security Tab, Click on Administrators Enabled Full Control for Administrators Click Apply, Then Click OK.

Then you will need to delete the registry key called "LastStateRestorePoint"

Then add a DWORD32 to HKEY_LOCAL_MACHINE\SOFTWARE\Cylance\Desktop called

"SelfProtectionLevel" and set the value to 1
Then reboot the device. Once the device is back up, you should be able to stop the Cylance service manually and proceed with the uninstall.

A command line uninstall option you can use is: msiexec /x {2E64FC5C-9286-4A31-916B-0D8AE4B22954}
!!!! UNINSTALL !!!!!