Share via

How to remove AV instance registry entry as i am not able to access this path getting access denied

SIMRAN SINGH 0 Reputation points
2025-04-29T07:38:27.05+00:00

Hi,

I am using trellix AV and while installing agent malware protection AV created having WMI instance and registry entry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av but after running Trellix AgentCleanupTool.exe it removes agent and its wmi instance but in registry still able to see the entry of AV with Trellix GUID.

I have tried multiple ways but windows not allowing me to delete this registry entry due to permission denied.

Can you please share some steps how to remove other company AV from this path as i can understand windows defender is not allowing us to access this registry.

Your suggestion will be helpful to deal with this issue.

User's image

Thanks in advance.

Regards,

Simran

Microsoft Security | Microsoft Defender | Microsoft Defender for Identity

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Catherine Kyalo 2,695 Reputation points Microsoft Employee
    2025-11-25T07:31:26.61+00:00

    Hi SIMRAN SINGH

    I came across a similar case that might address your concern. Please take a look and let me know if it resolves your issue or if you’d like further assistance

    https://v4.hkg1.meaqua.org/en-us/answers/questions/4142512/after-uninstalling-software-there-are-keys-in-the

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.