lukebussey/Remove Sophos from Mac without tamper protection password.md

Last active January 2, 2026 23:30

Star (102) You must be signed in to star a gist
Fork (15) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/lukebussey/70fe3b245c7b55fa41300670d2698e54.js"></script>
Save lukebussey/70fe3b245c7b55fa41300670d2698e54 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

Remove Sophos from Mac without tamper protection password.md

cd /Library/Preferences
sudo rm com.sophos.sav.plist

cd /Library/Application\ Support/Sophos/cloud/Installer.app/Contents/MacOS/tools/
sudo ./InstallationDeployer —force_remove

stenrdj commented Jan 2, 2026

Just in case somebody looking for the solution :

Shut off
Hold power button or CMD+R (depending on the mac) or force push on the power button > options > terminal
csrutil disable
Enter username
Enter password
Wait for confirm
Reboot

Then :

systemextensionsctl list
systemextensionsctl uninstall 2H5GFH3774 com.sophos.endpoint.networkextension ( Replace the id with teamid)
systemextensionsctl uninstall 2H5GFH3774 com.sophos.endpoint.scanextension ( Replace the id with teamid)
sudo rm -R /Library/Sophos\ Anti-Virus/
sudo launchctl unload /Library/LaunchDaemons/com.sophos.*
sudo killall SophosEventMonitor
sudo rm -rf /Library/SophosCBR/
Run Sophos Remover official Uninstall app
Reboot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment