DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
FREEDOM251

Freedom251 › Blog › Antivirus

How to Uninstall a Third-Party Antivirus in Windows 11 and Make Sure It Isn’t Still Active

By Freedom251 Team · · 10 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

To uninstall a third-party antivirus in Windows 11, use Start > Settings > Apps > Installed apps, choose the antivirus’ three-dot menu, select Uninstall, and complete its removal prompts. Then open Windows Security > Settings > Manage providers and verify that Microsoft Defender Antivirus—or your replacement product—is the active provider. A compatible third-party antivirus normally turns Defender off while it is running; when no working third-party product remains, Defender should turn itself on automatically. Do not assume that happened: check the provider status immediately after removal.

What happens to Windows security when you remove an antivirus?

A compatible non-Microsoft antivirus normally registers itself with Windows Security and turns Microsoft Defender Antivirus off while it provides real-time protection. Removing that product should leave Defender to take over automatically, provided no other working antivirus remains.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Microsoft describes the behavior this way: “If you install a compatible non-Microsoft antivirus program Microsoft Defender antivirus will automatically turn itself off.” It also says that “If you don’t have another security product, or it is expired, Microsoft Defender Antivirus will automatically turn on.” Those statements describe the intended hand-off, not a reason to skip verification.

Real-time protection is the important distinction. A product that only performs an occasional, on-demand scan is not the same as the provider actively protecting files, downloads, and running processes. Windows Security’s provider page tells you which product is registered for antivirus protection at that moment.

What should I do before uninstalling the current antivirus?

Prepare the computer first so that a failed removal or an unexpected restart does not leave you working without protection.

Save work and close the antivirus

Save open documents, close the antivirus window, and finish any scan or update that you deliberately started. An uninstaller may request a restart, and unsaved work can be lost if you postpone that request.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Scan first if the program is suspicious or malfunctioning

If the antivirus is expired, behaving like malware, or you suspect that the application itself is unsafe, use Windows Security to scan the computer before removing it. Microsoft’s removal guidance for a suspicious app is to scan and clean threats first, then remove the app.

Have a replacement ready if you are switching products

Download or otherwise prepare the replacement installer and make sure its subscription or license is available before you remove the existing product. Do not intentionally leave real-time protection disabled while you look for another antivirus; Microsoft warns that a device is vulnerable when Defender is disabled and no other working security product is protecting it.

Know which product you intend to keep

If more than one antivirus is installed, identify the one you want to remain active. Microsoft cautions against running multiple real-time antivirus products at the same time because they can conflict, compete for system resources, or interfere with updates.

How do I uninstall a third-party antivirus through Windows 11 Settings?

The normal Windows 11 route is the least disruptive method and is the one Microsoft documents. The product’s own uninstaller may open after you select Uninstall; follow those prompts rather than closing them.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Select Start.
  2. Open Settings.
  3. Select Apps, then Installed apps.
  4. Find the third-party antivirus in the list. Select its three-dot menu and choose Uninstall.
  5. Confirm the action in Windows and then complete every confirmation, removal, or restart prompt supplied by the antivirus.

Some products display a second confirmation window, ask whether you want to keep settings, or offer a feedback screen. Those choices belong to the product’s uninstaller; read them carefully and choose the option that actually removes the application. If the uninstaller requests a restart, restart before checking Windows Security.

Rank #2
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.

AV-Comparatives identifies Windows Settings > Apps as the default recommended route. On systems where the Settings entry is unavailable, it also identifies Control Panel > Programs and Features as the standard alternative: select the antivirus and choose its Uninstall, Change, or Modify command.

How do I check which antivirus is active after removal?

Use Windows Security’s provider page rather than relying on a notification, a missing taskbar icon, or the fact that the old program no longer opens.

  1. Open Windows Security from the Start menu.
  2. Select Settings.
  3. Choose Manage providers.
  4. Expand the Antivirus provider card. It identifies the provider currently protecting the device and can offer a link to open that provider’s app.
  5. Open Virus & threat protection and check the displayed status. Confirm that Microsoft Defender Antivirus is active, or that the replacement antivirus is registered and reporting protection.

The provider card is the decisive check because it reflects Windows Security’s registered protection provider. If the old antivirus is still shown as the provider, the removal has not completed cleanly. If no intended provider is active, do not treat the uninstall as finished: resolve the registration or installation problem first.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What should I do if Windows 11 will not uninstall the antivirus?

Use recovery tools in increasing order of intervention. Do not start by deleting the application’s folders, drivers, or registry entries.

1. Restart and retry the vendor uninstaller

Restart Windows, return to Settings > Apps > Installed apps, and try the antivirus’ Uninstall command again. A restart can release files or services that were still in use during the first attempt. Complete the vendor prompts and restart again if requested.

2. Run Microsoft’s Program Install and Uninstall troubleshooter

Microsoft’s Program Install and Uninstall troubleshooter is intended for damaged uninstall records, corrupted registry keys, incomplete uninstall data, and programs that cannot be completely removed or updated. Use it when the antivirus entry is present but the uninstall action fails, disappears without removing the program, or reports that the installation data is unavailable.

Follow the troubleshooter’s prompts to select the affected antivirus and allow it to repair the uninstall information. After it finishes, restart Windows and check Windows Security > Settings > Manage providers again.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3

3. Use the antivirus maker’s official cleanup utility

If the vendor publishes a dedicated cleanup or removal utility, use that tool when the normal uninstaller and Microsoft troubleshooter do not finish the job. These utilities are designed for the vendor’s own services, drivers, and registration data, so follow the vendor’s instructions exactly and restart when the utility asks.

Availability and names vary by product. Obtain the utility from the antivirus maker’s official support channel, not from a random download site, and verify that it is for your product and Windows edition before running it.

4. Avoid manual deletion

Do not manually delete antivirus folders, drivers, services, or registry entries as a shortcut. AV-Comparatives warns that removing the wrong item can leave Windows unstable or unusable and can leave behind the very components you intended to remove. Manual editing is appropriate only when the vendor’s documented support procedure specifically requires it and tells you exactly what to change.

Which removal method should I choose?

Use the least invasive method that matches the failure you are seeing.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Method Use it when What it changes Next check
Windows 11 Settings The antivirus appears normally under Installed apps. Runs the product’s standard uninstall process. Restart if requested, then check Manage providers.
Control Panel > Programs and Features The Settings entry is unavailable or the product exposes its legacy uninstaller there. Starts the same type of registered uninstall command through Control Panel. Confirm the provider in Windows Security.
Microsoft Program Install and Uninstall troubleshooter The uninstall record is damaged, incomplete, blocked, or cannot be found. Repairs uninstall data and removes a broken program entry. Restart and verify both the app list and provider card.
Vendor cleanup utility The standard uninstaller and Microsoft troubleshooter do not remove the product or its components. Uses the maker’s purpose-built cleanup process for its own files and registrations. Follow the utility’s restart instruction and verify the active provider.

How do I switch from one antivirus to another without a protection gap?

The safest sequence is to prepare the replacement first, remove the old product, and verify the new provider immediately. Never leave two real-time products deliberately enabled together.

  1. Save your work and prepare the replacement installer or subscription.
  2. Run a Windows Security scan first if the existing antivirus is suspicious, expired, or malfunctioning.
  3. Uninstall the current antivirus through Settings > Apps > Installed apps and complete its prompts.
  4. Restart when requested; do not postpone a required restart while assuming protection has transferred.
  5. Install the replacement antivirus and allow it to register with Windows Security.
  6. Open Windows Security > Settings > Manage providers and expand Antivirus.
  7. Open Virus & threat protection and confirm that the replacement reports active protection.

If you are not installing a replacement, the same process should result in Microsoft Defender Antivirus becoming active automatically. If you are installing one, Defender may turn itself off once Windows recognizes the compatible product; that is expected, provided the replacement is shown as the active provider.

How can I tell whether remnants are still causing a problem?

An old program can be gone from the Installed apps list while Windows Security still has a stale provider registration, or it can remain installed even though its user interface no longer opens. Check both places after every removal attempt.

Rank #4
Windows 11 Laptop with i3 Processor 15.6" Work Laptop for College Students | Backlit Keyboard WiFi 6 (2 cores, 4 Threads, up to 3.4GHz) 12GB RAM 256GB SSD TF Card Expandable to 2TB
  • 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
  • Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
  • 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
  • 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
  • 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
What you see Likely interpretation Action
The old antivirus remains in Installed apps. The standard uninstall did not complete. Restart, retry its uninstaller, then use the Microsoft troubleshooter if necessary.
The old antivirus is gone from Installed apps but appears as the Antivirus provider. Its registration or components may still be present. Use the vendor’s official cleanup utility, then restart and recheck Manage providers.
Microsoft Defender is shown as active. No compatible third-party provider is currently taking over real-time protection. Confirm the Virus & threat protection status and keep Windows Update enabled.
The intended replacement is shown as active. The hand-off completed. Check its status in Virus & threat protection and run a quick scan if Windows had been showing warnings.
No intended provider is active. The device may not have working real-time antivirus protection. Do not assume the removal is safe; finish installing the replacement or resolve the failed registration before normal use.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What final checks should I perform?

After the last uninstall or cleanup tool finishes, perform these checks in order:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Restart Windows if any uninstaller or cleanup utility requested it.
  • Open Windows Security > Settings > Manage providers and confirm exactly one intended real-time antivirus provider is active.
  • Open Virus & threat protection and review the current protection status.
  • Run a quick scan if the computer showed warnings during the failed removal or if the antivirus was suspected of being malicious.
  • Keep Windows Update enabled so Microsoft Defender security intelligence can update automatically when Defender is the active provider.

These checks separate “the icon disappeared” from “Windows has a functioning antivirus provider.” The latter is the outcome that matters.

What should I compare if I am choosing a replacement?

If uninstalling one antivirus is part of a replacement decision, compare protection behavior rather than marketing labels. The most useful questions are whether the product registers as the active Windows Security provider, whether it supplies an official cleanup utility, and whether it offers real-time protection or only on-demand scanning.

Comparison point Why it matters during a switch What to verify
Windows Security registration A product that does not register correctly may leave Defender disabled without a visible hand-off. After installation, check Manage providers and Virus & threat protection.
Official cleanup utility A dedicated remover can help if the normal uninstall later fails. Confirm that the maker documents a utility for your product and Windows version.
Real-time versus on-demand scanning Only an active real-time provider is the direct replacement for the protection you are removing. Read the product’s status in Windows Security rather than inferring it from a scan button.
System performance Multiple or competing real-time engines can create performance and update conflicts. Keep one intended real-time provider active.
Additional features Identity monitoring, parental controls, or similar extras may affect which product you keep, but they do not replace provider verification. Evaluate the feature separately from the antivirus registration status.

Why is verifying the provider more important than simply uninstalling the app?

Uninstallation and protection status are related but separate states. Windows can remove the visible application while a provider registration remains, or it can disable Defender while the third-party product is still being removed. The Manage providers page is the authoritative place in Windows Security to see which antivirus Windows currently recognizes as protecting the device.

Checking there also prevents a common mistake: installing a replacement and assuming both products are sharing the workload. Microsoft cautions against multiple real-time antivirus products because of performance and update conflicts. Keep one intended real-time provider active, then use the status page and a quick scan to confirm the result.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

What if the old antivirus still appears after I restart?

If it remains in Installed apps, retry its normal uninstaller and then use Microsoft’s Program Install and Uninstall troubleshooter if the entry is damaged. If it is gone from the app list but still appears under Manage providers, use the product maker’s official cleanup utility and check the provider page again after another restart.

Can Windows Defender and a third-party antivirus both be active?

A compatible third-party product normally turns Defender Antivirus off while it supplies real-time protection. Microsoft cautions against deliberately running multiple real-time antivirus products because they can conflict and consume resources; use Manage providers to confirm which one is registered as active.

What does an on-demand scanner change during an antivirus switch?

An on-demand scanner that runs only when you start it is not the same as a real-time antivirus provider. When replacing protection, verify that the product you choose registers under the Antivirus provider card and reports active protection in Virus & threat protection.

Why did Windows Security turn Defender back on after I removed the other product?

That is the expected Windows behavior when no other working or compatible antivirus remains. Microsoft says Defender automatically turns on in that situation; confirm the hand-off in Manage providers instead of relying only on a notification.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

AntivirusMicrosoft Defendersoftware removalTroubleshootingWindows 11Windows Security

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.