Antivirus software blocks the Trellix Agent FramePkg.exe file

Technical Articles ID: KB89079
Last Modified: 2023-02-08 13:19:06 Etc/GMT

Environment

Trellix Agent 5.x
Trellix Endpoint Security (ENS) 10.x

NOTE: McAfee Agent was rebranded to Trellix Agent in version 5.7.7.

Problem

One of the following issues occurs:

Antivirus software might indicate that the Trellix Agent file FramePkg.exe is suspicious and prevent it from execution.
Antivirus software blocks Trellix Agent installation.
ENS Dynamic Application Containment generates events for the file FramePkg.exe because it was contained due to "unknown" reputation as indicated through Threat Intelligence.

Cause

Antivirus software that acts on files based on reputation or because a file is unsigned, might hinder the installation of the Trellix Agent when deployed using ePolicy Orchestrator (ePO). The file FramePkg.exe is unsigned by design. This file is unique to each ePO environment. And while it contains signed binaries that it installs, the EXE or wrapper itself can't be signed.

Knowledge Center

Antivirus software blocks the Trellix Agent FramePkg.exe file

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Antivirus software blocks the Trellix Agent FramePkg.exe file

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title