Installing Cylance (and removing Sophos)

NOTE: These instructions are ONLY for computers within BCS and those within CVS not centrally managed by ISD or University IT (ie: managed by Chris Freemesser). All centrally managed computers should already be running Cylance!

The Cylance installers provided by University IT are designed to automatically remove Sophos and install Cylance for you, but sometimes they don't successfully remove Sophos. As such, these instructions will include explicit instructions for removing Sophos manually before you install Cylance.

Windows 7 & 10

1. Open the start menu (click the Windows icon in the bottom left corner of your desktop) and select "Control Panel". Windows 10 users will find "Control Panel" listed under "Windows System" near the bottom of the program list.

2. In the control panel window, click on the "Program & Features" control panel.

3. In the "Program & Features" control panel, you should see three programs related to Sophos..."Sophos AutoUpdate", "Sophos System Protection", and "Sophos Anti-Virus". You will need to right-click on each program, one at a time, and select the "Uninstall" option. Uninstall the three programs in this order:

- Sophos Anti-Virus (you will be prompted to restart the computer when this completes...select "NO")

- Sophos System Protection

- Sophos AutoUpdate

Once the uninstall of "Sophos AutoUpdate" is complete, please restart your computer.

4. After rebooting, open a web browser and download the Cylance for Windows installer from here (this link only works from the UR network):

http://www.cvs.rochester.edu/cvspriv/downloads/Cylance/Cylance_Windows.exe

5. Run the installer (the installer is self-explanatory and needs no further instruction). When it completes it may ask to reboot your computer. Please do so.

6. Upon reboot you should see a green shield icon in the system tray (bottom right corner of your desktop). That's the Cylance icon. If you left-click on it, it will bring up a status window. Cylance will first do a full system scan and any quarantined programs will be displayed under the "Threats" menu. You can't make any changes to the program itself, only view its status. If any applications have been put into quarantine by accident, please contact Chris Freemesser to have them removed from quarantine.

Mac OSX (10.9 and newer)

NOTE: If you are running a version of OSX older than 10.11, you need to have your OS upgraded. Please contact Chris Freemesser to arrange for a free OS upgrade

1. Open a web browser and download the Sophos uninstaller and Cylance installers from here (this link only works from the UR network):

http://www.cvs.rochester.edu/cvspriv/downloads/Cylance/Remove_Sophos_Mac.zip

http://www.cvs.rochester.edu/cvspriv/downloads/Cylance/Cylance_Mac.pkg

These programs should be downloaded to your "Download" folder, which usually appears near the Trash can in the system dock (ie: the selection of app icons that normally appears at the bottom edge of your desktop).

2. Double-click on the "Remove_Sophos_Mac.zip" file to decompress it. The application "Remove Sophos Anti-Virus" should now appear in the same directory as the "Remove_Sophos_Mac.zip" file. Double click on the "Remove Sophos Anti-Virus" application to launch it. The initial page may appear in German...I have no idea why, but it's not important. Click on the "Continue" button and enter your OSX password when prompted. Sophos will now be uninstalled...a reboot should not be necessary.

3. Double-click on the "Cylance_Mac.pkg" file you downloaded to launch the installer, and again, enter your OSX password when prompted. The install should now complete successfully.

4. You should see a new shield icon in the top right corner of your desktop. That's the Cylance icon. If you left-click on it and select "Show Details", it will bring up a status window. Cylance will first do a full scan of your computer and any quarantined programs will be displayed under the "Threats" menu. You can't make any changes to the program itself, only view its status. If any applications have been put into quarantine by accident, please contact Chris Freemesser to have them removed from quarantine.