- #MCAFEE SECURITY ENDPOINT REMOVAL REGISTRATION#
- #MCAFEE SECURITY ENDPOINT REMOVAL MODS#
- #MCAFEE SECURITY ENDPOINT REMOVAL PASSWORD#
# Kill McAfee Reporter when unloading launch items # Kill McAfee Agent Status Monitor when unloading launch items # Remove Privileged HelperTool added with ENS 10.7.1 # Updated launchctl calls to use bootout instead of unload
#MCAFEE SECURITY ENDPOINT REMOVAL MODS#
# E-Mail: version 2.1 mods by Steve Dagley The script posted above looks like it was based on an older version, so here's the current one (v2.2): #!/bin/sh You'll find the latest RipOffMcAfee script pinned in the #mcafee channel of the MacAdmins Slack. usr/sbin/pkgutil -forget > /dev/null 2>&1 Pltvrsn=`/usr/bin/sw_vers | grep ProductVersion | cut -d: -f2`Įcho "Forgetting McAfee Agent package." ] & rm -rf "$EachFile" > /dev/null 2>&1 & echo "Deleting $EachFile"
![mcafee security endpoint removal mcafee security endpoint removal](https://www.igorkromin.net/fp-content/images/osx/mcafee.png)
#Delete all LaunchDaemons from array McAfeeLaunchDaemons ] & rm -rf "$EachFolder" & echo "Deleting $EachFolder" #Delete all folders from array McAfeeFolders ] & rm -f "$EachFile" & echo "Deleting $EachFile" ] & kextunload "$EachFile" > /dev/null 2>&1 & echo "Unloading $EachFile" & sleep 5 ] & launchctl unload "$EachFile" & echo "Unloading $EachFile" #Unload all LaunchDaemons from array McAfeeLaunchDaemons Library/StartupItems/cma/cmamesh forcestop Su - $currentUser -c 'killall "McAfee Endpoint Security for Mac"'
![mcafee security endpoint removal mcafee security endpoint removal](https://community.mcafee.com/legacyfs/online/a108124_untitled.png)
Su - $currentUser -c 'killall "McAfee Endpoint Protection for Mac"' Su - $currentUser -c 'launchctl unload /Library/LaunchAgents/' '/Applications/McAfeeSystemExtensions.app' '/Library/Documentation/Help/McAfeeSecurity_Firewall.help' '/Library/Documentation/Help/McAfeeSecurity_ApplicationProtection.help' '/Library/Documentation/Help/McAfeeSecurity_AVOnly.help' '/Applications/McAfee Endpoint Security for Mac.app' '/Applications/McAfee Endpoint Protection for Mac.app' '/usr/local/McAfee/fmp/Extensions/NWCore.kext' '/usr/local/McAfee/fmp/Extensions/FileCore.kext' 'tocal/McAfee/fmp/Extensions/FMPSysCore.kext' '/usr/local/McAfee/StatefulFirewall/Extensions/SFKext.kext' '/usr/local/McAfee/AppProtection/Extensions/AppProtection.kext' '/usr/local/McAfee/AntiMalware/Extensions/AVKext.kext' read "/Users/$currentUser" NFSHomeDirectory | cut -d: -f 2 | sed 's/^ *//'| tr -d ' # don't assume the home folder is equal to the user's nameĬurrentUser=$(stat -f %Su "/dev/console")
#MCAFEE SECURITY ENDPOINT REMOVAL REGISTRATION#
McAfee can also cause InTune registration to fail when blocking untrusted certificates. I found this script called RipOffMcAfee and then modified it to remove some additional extensions and framework for DLP. It may be the case here as well since it's calling sudo -S I will have to go back and check on that, but I know invoking any sudo commands in a script usually end up dropping the entire command that was run after it into the log. I believe the one issue with this is that it may end up showing up in the system.log, which you could clear up later if so inclined with a carefully crafted grep/sed command.
#MCAFEE SECURITY ENDPOINT REMOVAL PASSWORD#
You have to pass the product, like "EPM" to $4 and the password to $5. Removing AV."Įcho "$passAV" | sudo -S "$avUninstaller1022" "$prdVers"Įcho "McAfee AV product not found. Here's an example of how with a script we use in a policy #!/bin/bashĪvUninstaller1022="/usr/local/McAfee/uninstall"Įcho "McAfee AV 10.2.2 product found. Rm -rf /Library/LaunchDaemons/com.mcafee*įWIW, you can actually send the password required for removing the McAfee EPM components (if required by your EPO admins) in a script, using Jamf script parameters of course. Launchctl unload /Library/LaunchDaemons/com.mcafee*
![mcafee security endpoint removal mcafee security endpoint removal](https://msofficesetup.support/wp-content/uploads/2021/03/WhatsApp-Image-2021-03-19-at-18.10.33.jpeg)
& rm -rf /Library/Application Support/McAfee & rm -rf /Applications/McAfee Endpoint Security for Mac.app & rm -rf /Applications/McAfee Endpoint Protection for Mac.app & /Library/McAfee/agent/scripts/uninstall.sh
![mcafee security endpoint removal mcafee security endpoint removal](https://i.ytimg.com/vi/4dp-b9fQX9Y/maxresdefault.jpg)
& /Library/McAfee/cma/scripts/uninstall.sh