Uninstall Trellix Agent using command-line options on Windows systems

You can remove Trellix Agent from client systems using the Windows command-line option.

Open a command prompt(as administrator) on the client system.
Navigate to the Trellix Agent installation folder (where FrmInst.exe is located):
- For 64-bit Systems: cd C:\Program Files\McAfee\Agent\x86
- For 32-bit Systems: cd C:\Program Files\McAfee\Agent
Run the uninstallation command based on your requirement:
- To Forcibly Remove the Agent (Recommended): Run this command to guarantee removal, even if other Trellix products are installed. FrmInst.exe /FORCEUNINSTALL.
  Alternatively, if the local utility is missing, run this command from the folder containing the installation package: framepkg.exe /forceuninstall
  Warning
  This removes the Agent immediately. Any remaining Trellix products (like Endpoint Security) will become unmanaged and stop receiving updates.
- To Perform Standard Removal: Run this command only if you have confirmed no other Trellix products are installed. FrmInst.exe /REMOVE=AGENT
  Important
  The Agent will be removed even if point products (like ENS) are present on the system. However, those products will become unmanaged and will no longer receive updates or policy changes.

To cleanly uninstall all point products alongside the agent, use one of the following centralized methods before running local command-line tools:

ePO SaaS: Delete the system from the System Tree to automatically remove both the agent and all associated point products across all platforms.
ePO - On-Prem:
- Create and run a Product Deployment task configured to uninstall all endpoint products. Once completed, remove the agent via the command line, Control Panel, or by deleting the node from the System Tree.
- Endpoint Product Removal (EPR): Use the EPR tool option available in the Software Catalog to clean up all Trellix installations.

If Trellix Agent is still not removed, remove it manually. For details, see KB65863.