A McAfee Nightmare

As referenced in disinespic (.com) - New Malware? - Apple Community, I've had a lot of trouble on my iPhone and on my Macs that were brought on by the McAfee software I'd installed.


I deleted the app on two phones and used their uninstaller to get rid of it on three Macs. The "uninstaller" finished with a notification of what it had added.



It took some effort but in each case there were many parts left behind that I searched out and deleted myself. On the Macs I was unable to remove com.mcafee.CMF.networkextension.systemextension or com.mcafee.CMF.networkextension because I lack permission to access them.


Today, weeks after deleting all else, my wife's computer suddenly could connect to our wifi but could not connect to anything on the internet. After trying everything I could think of I discovered that McAfee VPN had enabled itself, creating the very issue I dealt with before. Its self-reenabling had been the source of my iPhone trouble.


On all of our Macs I discovered that each has hundreds of entries in the Diagnostics Reports regarding McAfee. So it's far from gone.


How do I get rid of this cursed software!!


Posted on Apr 5, 2023 1:02 PM

Reply
Question marked as Top-ranking reply

Posted on Apr 5, 2023 3:55 PM

Looks like this is what it is going to take to get the job done. If you don't want to go down this path, I totally understand. You will have to boot into recovery mode, disable SIP, reboot, delete extension, reboot into recover, enable SIP, reboot. Here are detail steps.


  • BOOT INTO RECOVERY MODE

On Intel Mac, hold down Command - R on reboot. On Apple Silicon, hold power button while starting up until Options button appears. Click the button and continue, you may be asked to choose your startup drive.

  • DISABLE SIP

In the menu bar of the Recovery Mode, choose Utilities > Terminal.

Enter the command "csrutil disable"

Quit Terminal by going to Terminal > Quit

  • RESTART
  • OPEN TERMINAL

Enter the command "systemextensionsctl list". This will give you a list of the extensions. You will want to look for the Team ID and Bundle ID (which start with "com." and use them in the next command.

Type "systemextensionsctl uninstall TEAMID BUNDLEID" substituting the TEAMID and BUNDLEID with the ones from above. Do the uninstall command on all extensions you want removed. Quit Terminal.

  • BOOT INTO RECOVERY MODE
  • ENABLE SIP

In the menu bar of the Recovery Mode, choose Utilities > Terminal.

Enter the command "csrutil enable"

Quit Terminal by going to Terminal > Quit

  • RESTART



Similar questions

16 replies

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

A McAfee Nightmare

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.