Press CTRL+K to open search

Uninstalling disguised Windows agent software

  • Published on Sep 8, 2026
  • 1 minute(s) read
Prev Next
To uninstall disguised Windows agent software:

  1. Locate the .msi installation file for the agent software. This must be for the same agent version that is installed on the host endpoint.

  2. Run the .msi file, selecting the Remove option when prompted.

  3. Confirm the software removal by responding Yes or clicking Remove as necessary.

Important

A reboot is necessary after uninstalling TrellixEndpoint Security Agent (HX) 24.9 and before installing the 25.12 agent.

Note

Artifacts that remain in the C:\Windows\FireEye folder after the agent software has been uninstalled will be deleted the next time the endpoint host is rebooted.

If a Windows agent uninstall attempt fails because the binary is missing or corrupt or because the ProgramData/FireEye or Program Files/FireEye directories are missing or corrupt, reinstall the agent using command-line commands (msiexec /i xagt.msi /qn) and then uninstall it.

:
Related articles