Mcafee VirusScan Enterprise or Intel Enterprise End Point protection command line reference.Microsoft visio 2010 download free.

Framepkg.exe contains all the files required to install an agent in managed mode. If you run it on a machine that already has a managed agent on it, it will effectively replace the agent on the machine, causing the machine to communicate with whichever ePO server created the package. This website uses cookies. By continuing to use this site and/or clicking the 'Accept' button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us.

Some common tasks we are frequently asked about are command line options for several Intel and McAfee security products so we have complied a small list of some of the most often used commands for viewing or controlling these products.

Red text = commandBlue text = output displayed after running command.

Viewing Virus Definition, Engine or date Status via command line:

reg query “HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMcAfeeAVEngine” /v “AVDatVersion”

HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMcAfeeAVEngine

AVDatVersion REG_DWORD 0x2343

(Only displays in hex and not decimal format, if you would like to get a report of the actual Dat version in the display gui version try this none admin required PowerShell command,

Get-ItemProperty -Path HKLM:SOFTWAREWOW6432NodeMcAfeeAVEngine

DAT : c:Program Files (x86)Common FilesMcAfeeEngine
szInstallDir64 : c:Program Files (x86)Common FilesMcAfeeEnginex64
szInstallDir32 : c:Program Files (x86)Common FilesMcAfeeEngine
EngineVersionMajor : 5900
EngineVersionMinor : 7806
AVDatVersion : 9028
AVDatDate : 2018/09/26
TrjDatDate :
PUPDatDate :
EngineVersion32Major : 5900
EngineVersion32Minor : 7806
AVDatVersionMinor : 0
AVDatDateSys : {226, 7, 9, 0…}
TrjDatVersion : 0 PUPDatVersion : 0
EngineVersion64Major : 5900
EngineVersion64Minor : 7806

If you are looking for a smaller report you can add the specific subkey name, here is an example,

Get-ItemProperty -Path HKLM:SOFTWAREWOW6432NodeMcAfeeAVEngine -name AVDatVersion

Viewing Agent Status via command line:

These list possible paths to the cmdagent.exe file and if ran with the /p switch it tells the agent to checkin to ePO server right away
if you read the response after running the command it will also state if it is in managed or unmanaged mode.

“c:program filesmcafeeagentcmdagent.exe” /p
“C:Program Files (x86)McAfeeCommon Frameworkcmdagent.exe” /p
“C:Program FilesNetwork AssociatesCommon FrameworkCmdAgent.exe” /P

2018-09-26 14:02:07.294 cmdagent(4988.7936) cmdagent.Info: Agent is running in unmanaged mode.

Deploying or installing via command line:

c:VSinstallsetupvse.exe /passive
c:VSinstallePOFramePkg.exe /install=agent /silent

McAfee Interceptor installer
msiexec /i c:VSinstallInterceptor_x64.msi /passive

Removing or uninstalling via command line:

Occationally things are not as they should be and normal uninstall tactics do not work but here is one command often used they might be ran first before any other removal can be successful

“C:Program Files McAfeeAgentmaconfig.exe” -provision -unmanaged (Then uninstall normally, this issue is most often related to ePO based agents. This command places the install in un- managed mode)

Normal removal command examples follow,

McAfee product improvement:
MsiExec.exe /x{D45EAF28-A176-41B3-98B7-20375F0A1ADF} /passive /norestart

McAfee 8.7 agent
MsiExec.exe /X{AA951B10-7089-4D60-B288-516E641F48E6} /QN

McAfee 8.7
MsiExec.exe /X{147BCE03-C0F1-4C9F-8157-6A89B6D2D973} /QN

McAfee 8.8 agent included with virusscan:
MsiExec.exe /X{D107EA80-023A-443C-AA79-1C4B0CB2E227} /QN

McAfee 8.8, p2 and up:
MsiExec.exe /X{CE15D1B6-19B6-4D4D-8F43-CF5D2C3356FF} /passive /norestart

McAfee Interceptor removal
msiexec /x c:VSinstallInterceptor_x64.msi /passive

Agent removal via command line:

“C:Program Files (x86)McAfeeCommon FrameworkFrmInst.exe” /forceuninstall
“C:Program Files (x86)McAfeeCommon Frameworkx86FrmInst.exe” /forceuninstall
“C:Program FilesMcAfeeAgentx86FrmInst.exe” /forceuninstall

Normally reinstalling the McAfee Common Management Agent (CMA) requires a reboot in order for the server to be properly displayed in the EPO management interface. Here’s how to perform the reinstall, minus the reboot requirement.

1. Connect to the Windows server console by logging directly onto the server, or by connecting via RDP by running mstsc.exe /console

2. Open the VirusShield Console.

3. Double click Access Protection. Uncheck:

• Prevent McAfee Services from being stopped
• Enable Access Protection.

Click OK.

4. Launch a command prompt with administrative credentials

5. Change to the installation directory by typing

6. Perform the uninstall by typing

7. Launch Regedit

8. Delete the following registry keys

9. Run FramePkg.exe to reinstall the CMA and Framework Service