Symantec System Extension Crash after Xcode Update on MacBook Air M2

After updating Xcode (and to 15.1) there is a system extension that continues starting from launchd and crashing for a missing DYLD. Process is com.symantec.mes.systemextension. I have never installed symantec/Norton on this MacBook Air M2 but did on a previous MacBook Pro (early 2015).


I contacted symantec, but their uninstall tool does not touch this SystemExtension directory, it just

deletes the crash files.


Is this a MacBook required extension. If not, is there a safe way to delete it?


[Re-Titled By Moderator]



Posted on Oct 31, 2024 9:50 PM

Reply
Question marked as Top-ranking reply

Posted on Nov 1, 2024 12:06 PM

I believe I have the issue solved


reboot to recovery

disable SIP

reboot

systemextensionsctl uninstall - com.symantec.mes.systemextension

reboot to recovery

enable SIP

reboot


What I believe caused problem:

On old early 2015 MacBook Pro, I installed Norton 360 and shortly after uninstalled it because

it didn't not work correctly

The symantec uninstall tool does NOT remove all files; neither the original script I used on old MacBook

nor the most recent one just downloaded. (also because of SIP you can't easily run the script or

even read it in TextEdit)

When I migrated to M2 MacBook Air, I restored files from Time Machine. So the systemextensions

was copied over to new MacBook.


When I updated to most recent Xcode, I removed the old simulator files pre-15 to save disk space.

The DYLD file the com.symantec.mes.systemextension was linking to was probably cached

somewhere in those Xcode directories. The extension was probably never "working" on

the MacBook air since no application was on machine to call it but it wasn't crashing immediately

and having launchd restarting it in a loop.


I only noticed this because excessive battery drain and seeing crash report process keep popping up

on the activity monitor.

Similar questions

3 replies
Question marked as Top-ranking reply

Nov 1, 2024 12:06 PM in response to JimC_999

I believe I have the issue solved


reboot to recovery

disable SIP

reboot

systemextensionsctl uninstall - com.symantec.mes.systemextension

reboot to recovery

enable SIP

reboot


What I believe caused problem:

On old early 2015 MacBook Pro, I installed Norton 360 and shortly after uninstalled it because

it didn't not work correctly

The symantec uninstall tool does NOT remove all files; neither the original script I used on old MacBook

nor the most recent one just downloaded. (also because of SIP you can't easily run the script or

even read it in TextEdit)

When I migrated to M2 MacBook Air, I restored files from Time Machine. So the systemextensions

was copied over to new MacBook.


When I updated to most recent Xcode, I removed the old simulator files pre-15 to save disk space.

The DYLD file the com.symantec.mes.systemextension was linking to was probably cached

somewhere in those Xcode directories. The extension was probably never "working" on

the MacBook air since no application was on machine to call it but it wasn't crashing immediately

and having launchd restarting it in a loop.


I only noticed this because excessive battery drain and seeing crash report process keep popping up

on the activity monitor.

Nov 1, 2024 4:55 AM in response to JimC_999

Is this a MacBook required extension.


No.


EtreCheck ought to identify the offending component easily. Post its report and someone here can provide instructions for getting rid of it safely. Instructions for using EtreCheck are here: How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community. Please read and follow those instructions with care.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Symantec System Extension Crash after Xcode Update on MacBook Air M2

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.