cd /Library/Preferences
sudo rm com.sophos.sav.plist
cd /Library/Application\ Support/Sophos/cloud/Installer.app/Contents/MacOS/tools/
sudo ./InstallationDeployer —force_remove
Last active
January 2, 2026 23:30
-
Star
(102)
You must be signed in to star a gist -
Fork
(15)
You must be signed in to fork a gist
-
-
Save lukebussey/70fe3b245c7b55fa41300670d2698e54 to your computer and use it in GitHub Desktop.
Just in case somebody looking for the solution :
- Shut off
- Hold power button or CMD+R (depending on the mac) or force push on the power button > options > terminal
- csrutil disable
- Enter username
- Enter password
- Wait for confirm
- Reboot
Then :
- systemextensionsctl list
- systemextensionsctl uninstall 2H5GFH3774 com.sophos.endpoint.networkextension ( Replace the id with teamid)
- systemextensionsctl uninstall 2H5GFH3774 com.sophos.endpoint.scanextension ( Replace the id with teamid)
- sudo rm -R /Library/Sophos\ Anti-Virus/
- sudo launchctl unload /Library/LaunchDaemons/com.sophos.*
- sudo killall SophosEventMonitor
- sudo rm -rf /Library/SophosCBR/
- Run Sophos Remover official Uninstall app
- Reboot
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi everyone. I was able to uninstall Sophos 2024 version. It's actually kinda funny.
First I used MacPaw's Clean My Mac to Uninstall Sophos. It removes most of the files but the endpoint itself is still active yet damaged. Also "Install Sophos" app is still in the Library. I used "Install Sophos" to reinstall Sophos. It starts blocking as usual after few hours.
Then I ran Uninstall Sophos app which doesn't require any passwords. And it removed Sophos completely from my mac which was wild.
I know this description is a bit clunky and requires a different app to uninstall Sophos, but at least this may serve as a workaround before someone savvy writes a terminal code.
This actually leaves out two SystemExtensions com.sophos.endpoint.scanextension and com.sophos.endpoint.networkextension which are difficult to delete. I followed this instruction to disable System Integrity Protection in recovery mode, delete the extensions and enable the SIP again. So now finally no more Sophos on my mac.