How to remove AV instance registry entry as i am not able to access this path getting access denied

SIMRAN SINGH 0 Reputation points
2025-04-29T07:38:27.05+00:00

Hi,

I am using trellix AV and while installing agent malware protection AV created having WMI instance and registry entry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av but after running Trellix AgentCleanupTool.exe it removes agent and its wmi instance but in registry still able to see the entry of AV with Trellix GUID.

I have tried multiple ways but windows not allowing me to delete this registry entry due to permission denied.

Can you please share some steps how to remove other company AV from this path as i can understand windows defender is not allowing us to access this registry.

Your suggestion will be helpful to deal with this issue.

User's image

Thanks in advance.

Regards,

Simran

Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
255 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.