Skip to content

Instantly share code, notes, and snippets.

@lukebussey

lukebussey/Remove Sophos from Mac without tamper protection password.md

Last active December 4, 2024 13:39
Show Gist options
  • Save lukebussey/70fe3b245c7b55fa41300670d2698e54 to your computer and use it in GitHub Desktop.
Save lukebussey/70fe3b245c7b55fa41300670d2698e54 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Remove Sophos from Mac without tamper protection password.md 
cd /Library/Preferences
sudo rm com.sophos.sav.plist

cd /Library/Application\ Support/Sophos/cloud/Installer.app/Contents/MacOS/tools/
sudo ./InstallationDeployer —force_remove
@nikkuleznev
Copy link

nikkuleznev commented Dec 4, 2024 •
edited
Loading

Hi everyone. I was able to uninstall Sophos 2024 version. It's actually kinda funny.

First I used MacPaw's Clean My Mac to Uninstall Sophos. It removes most of the files but the endpoint itself is still active yet damaged. Also "Install Sophos" app is still in the Library. I used "Install Sophos" to reinstall Sophos. It starts blocking as usual after few hours.

Then I ran Uninstall Sophos app which doesn't require any passwords. And it removed Sophos completely from my mac which was wild.

I know this description is a bit clunky and requires a different app to uninstall Sophos, but at least this may serve as a workaround before someone savvy writes a terminal code.

This actually leaves out two SystemExtensions com.sophos.endpoint.scanextension and com.sophos.endpoint.networkextension which are difficult to delete. I followed this instruction to disable System Integrity Protection in recovery mode, delete the extensions and enable the SIP again. So now finally no more Sophos on my mac.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment