DLP

Trellix Agent Removal using Endpoint Product Removal (EPR) Tool

1) Where and How to Download the EPR Tool

• Visit: Trellix My Products Portal
• Login: Provide your Grant Number and Email Address of the client.
• Access: After logging in, go to your My Products dashboard.
• Locate: Find the Endpoint Product Removal (EPR) tool (this may appear under utilities, tools, or endpoint solutions).
• Download: Click to download the appropriate version of the EPR executable (e.g. EndpointProductRemoval_25.8.0.35.exe). Then proceed with the removal steps.

2) Process Of Removal Of Agent

1. Run as admin: Right-click EndpointProductRemoval_25.8.0.35.exe → Run as administrator.
2. Accept EULA when prompted.
3. Select products to remove
   1. Expand the list and tick Trellix Agent (and only that, if your goal is Agent only).
   2. If you also want to wipe ENS or other Trellix apps, tick those as well and proceed in the same run.
4. Choose reboot behavior
   1. If offered: Reboot automatically (recommended), or No reboot (only if you will reboot manually later).
5. Start Removal
   1. Click Remove.
   2. The tool will stop masvc, unregister services, remove files/registry, and queue anything in use for removal on reboot.
6. Reboot when prompted (or as soon as the run completes if you chose No reboot).

3) Post-removal Verification (After Reboot)

1. Programs & Features / Apps & Features
   1. Trellix Agent should be absent.
2. Services (services.msc)
   1. Trellix/McAfee Agent Service (masvc) should not exist.
3. Folders (these should be gone; a few empty stubs can remain until one more reboot)
   1. C:\Program Files\Trellix\Agent\
   2. C:\ProgramData\Trellix\Agent\
   3. (older) C:\Program Files\McAfee\Agent\ and C:\ProgramData\McAfee\Agent\