The alert came from FortiClient’s own self-protection module. FCRemove.exe—the legitimate uninstaller tool—had been triggered on a senior partner’s laptop. But the log didn’t show a clean uninstall. It showed an exclusive file lock on the system’s core network filter driver. That wasn’t how the tool worked. FCRemove.exe was designed to scrub remnants of old installations. It was not designed to hoard a lock on a live driver.
The FCRemove.exe utility is a dedicated removal tool designed by Fortinet to completely uninstall FortiClient when standard methods fail. It is primarily used to remove "managed" clients—those registered to an Enterprise Management Server (EMS)—which often have uninstallation locked to prevent unauthorized removal. 🛠️ Core Purpose forticlient fcremoveexe exclusive
Fortinet does not provide a standalone public download for this tool to prevent end-users from easily bypassing corporate security policies. : Log in to the Fortinet Support Portal. It showed an exclusive file lock on the
This tool is considered a last resort for the following situations: It was not designed to hoard a lock on a live driver