This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to completely uninstall Sophos agent on MAC 12.6

We have a few Macs in our environment and the agent quit updating on all of them when 12+ was installed. I uninstalled the product using the following guide and it ran successfully:

https://support.sophos.com/support/s/article/KB-000035097?language=en_US 

I went to reinstall, and it says that the product is still installed. I then did every step in the following articles, with no success

https://support.sophos.com/support/s/article/KB-000035182?language=en_US

https://support.sophos.com/support/s/article/KB-000033340?language=en_US

https://support.sophos.com/support/s/article/KB-000035045?language=en_US

There aren't any system extensions and when I search for sophos nothing even populates. Please advise.



This thread was automatically locked due to age.
Parents
  • Hi Jim,

    Thanks for reaching out to the Sophos Community Forum.

    After uninstalling normally, the system extensions may still be present. You’ll need to reboot the device for the removal of the extensions to complete.
    I suggest running the following command via Terminal to check if they’re left behind. If you see any entries beginning with "com.sophos" you will want to remove these. 
    - systemextensionsctl list

    The following Recommended Read shares further guidance on how to do so. 
    HOW TO: Remove System Extensions

    You can also try the following script taken from the Sophos Home website

    #!/bin/bash
    echo “Remove Sophos Home”
    sudo pkill -9 “Sophos*”
    sudo rm -r /Library/Sophos\ Anti-Virus
    sudo rm -r /Library/LaunchDaemons/com.sophos.*
    sudo rm -r /Library/LaunchAgents/com.sophos.*
    sudo rm -r /Library/Preferences/com.sophos.*
    sudo rm -r /Library/Logs/Sophos\ Anti-Virus.log
    sudo rm -r ~/Library/Logs/Sophos\ Anti-Virus/Scans/
    sudo rm -r /Library/Application\ Support/Sophos/
    sudo rm -r /Applications/Sophos
    sudo rm -r /Applications/Sophos\ Anti-Virus.app
    sudo rm -r /Applications/Sophos\ Home.app
    sudo rm -r /Applications/Remove\ Sophos\ Anti-Virus.app/
    sudo rm -r /Applications/Remove\ Sophos\ Home.app/
    sudo rm -r /Library/SophosCBR
    sudo rm -r /var/db/receipts/com.sophos.*
    sudo rm -r /Library/Extensions/Sophos*
    sudo rm -r /Library/Frameworks/SAVI-pyexec.framework 
    sudo rm -r /Library/Frameworks/SAVI.framework 
    sudo rm -r /Library/Frameworks/SophosGenericsCommon.framework
    sudo rm -r /Library/Frameworks/SophosGenericsCore.framework

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Reply
  • Hi Jim,

    Thanks for reaching out to the Sophos Community Forum.

    After uninstalling normally, the system extensions may still be present. You’ll need to reboot the device for the removal of the extensions to complete.
    I suggest running the following command via Terminal to check if they’re left behind. If you see any entries beginning with "com.sophos" you will want to remove these. 
    - systemextensionsctl list

    The following Recommended Read shares further guidance on how to do so. 
    HOW TO: Remove System Extensions

    You can also try the following script taken from the Sophos Home website

    #!/bin/bash
    echo “Remove Sophos Home”
    sudo pkill -9 “Sophos*”
    sudo rm -r /Library/Sophos\ Anti-Virus
    sudo rm -r /Library/LaunchDaemons/com.sophos.*
    sudo rm -r /Library/LaunchAgents/com.sophos.*
    sudo rm -r /Library/Preferences/com.sophos.*
    sudo rm -r /Library/Logs/Sophos\ Anti-Virus.log
    sudo rm -r ~/Library/Logs/Sophos\ Anti-Virus/Scans/
    sudo rm -r /Library/Application\ Support/Sophos/
    sudo rm -r /Applications/Sophos
    sudo rm -r /Applications/Sophos\ Anti-Virus.app
    sudo rm -r /Applications/Sophos\ Home.app
    sudo rm -r /Applications/Remove\ Sophos\ Anti-Virus.app/
    sudo rm -r /Applications/Remove\ Sophos\ Home.app/
    sudo rm -r /Library/SophosCBR
    sudo rm -r /var/db/receipts/com.sophos.*
    sudo rm -r /Library/Extensions/Sophos*
    sudo rm -r /Library/Frameworks/SAVI-pyexec.framework 
    sudo rm -r /Library/Frameworks/SAVI.framework 
    sudo rm -r /Library/Frameworks/SophosGenericsCommon.framework
    sudo rm -r /Library/Frameworks/SophosGenericsCore.framework

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Children