Hello Donnaroehrig,

 I'm not aware why ATP would still block the program after being removed, unless the script/exe was quarantined at the time of removal.

I would suggest to troubleshoot:

1. Reinstall ATP on the affected endpoint.
2. Attempt to run the program that is causing you issues and make a note of the timestamp. 
3. Collect logs by referencing https://www.dell.com/support/article/us/en/19/sln294330/how-to-collect-logs-for-dell-data-security-dell-data-protection-using-diagnosticinfo?lang=en.
4. I would suggest creating an EXE for log bundle so you can read it easily. 
5. In the log bundle drill down to \Cylance\[Date].log.
6. If ATP is blocking the program, in the log you should see the hash or script being blocked around the timestamp in step 2. 

Let me know if you run into any issues or have further questions. 

Brian Piatt

L4 | Dell Data Security #Iwork4Dell

Need immediate help? Please call the Dell Data Security queue at https://www.dell.com/support/article/us/en/04/SLN297692