Can't delete a system extension

Hi there,


After having uninstalled Intego VirusBarrier, I tried to delete this remaining system extension : "com.intego.app.netbarrier.firewall.extension.systemextension" but I couldn't. It says I don't have permission to do it. I tried then to change permissions, but same answer, I don't have permission to change permissions.


Seems it's no more my Mac, but Intego's one… Does anybody know how to get rid of this *** extension ?


Thanks.

Posted on Mar 13, 2023 01:34 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 14, 2023 10:16 AM

Thanks, I already tried this, but it doesn't work (and btw no need to reinstall the Intego app, there is an uninstaller app on the install bundle dmg available on their website). But the Intego uninstaller leaves a lot of crap behind. Most of them can be easily removed and deleted by doing a search with "Intego" as keyword (and allowing system files to be found), but not this one, even with a root access. It's of course on purpose, since an anti-virus/malware software is supposed to protect the system from attacks using a root access.


So, from what I could read so far, to get around this limitation requires to first disable the System Integrity Protection (SIP). it doesn't seem like a big deal to do. You just need to make sure to enable it again when the cleaning is completed.


I'm about to do it, let's hope it works!




Similar questions

5 replies
Question marked as Top-ranking reply

Mar 14, 2023 10:16 AM in response to Ronasara

Thanks, I already tried this, but it doesn't work (and btw no need to reinstall the Intego app, there is an uninstaller app on the install bundle dmg available on their website). But the Intego uninstaller leaves a lot of crap behind. Most of them can be easily removed and deleted by doing a search with "Intego" as keyword (and allowing system files to be found), but not this one, even with a root access. It's of course on purpose, since an anti-virus/malware software is supposed to protect the system from attacks using a root access.


So, from what I could read so far, to get around this limitation requires to first disable the System Integrity Protection (SIP). it doesn't seem like a big deal to do. You just need to make sure to enable it again when the cleaning is completed.


I'm about to do it, let's hope it works!




Mar 14, 2023 11:43 PM in response to wtfigo

If you're unable to remove a system extension on your Mac due to permissions issues, you can try the following steps:

  1. Restart your Mac: Sometimes, restarting your Mac can help resolve any issues that may be preventing you from deleting a system extension.
  2. Boot your Mac in Safe Mode: Starting up your Mac in Safe Mode can help resolve issues related to permissions. To do this, shut down your Mac, and then press the power button while holding down the Shift key. Once your Mac starts up, try deleting the system extension again.
  3. Use Terminal: If the above steps don't work, you can try removing the system extension using Terminal. Here are the steps:
  4. a. Open Terminal (Applications > Utilities > Terminal).
  5. b. Type the following command and press Enter:
sudo rm -rf 
/Library/SystemExtensions/com.intego.app.netbarrier.firewall.extension.systemextension
  1. c. You will be prompted to enter your administrator password. Type it in and press Enter.
  2. d. Terminal will then attempt to remove the system extension. Once the process is complete, restart your Mac and check if the system extension is gone.

Note: Be careful when using Terminal, as it can cause issues if used incorrectly.

If none of the above steps work, it's recommended that you contact Intego's support team for assistance.

Mar 15, 2023 01:34 AM in response to anu_krishna

Thanks for your help, but since OS X El Capitan, none of these methods work with some protected extensions like this one.


I suggest you read my previous post (at least the second paragraph) and visit the Apple web pages linked. It looks like it’s the right solution.


I’ll get back to this thread as soon as I have time to use this method (after having updating my system with the last security update).

Mar 16, 2023 09:21 PM in response to anu_krishna

anu_krishna wrote:

5. b. Type the following command and press Enter:
sudo rm -rf
/Library/SystemExtensions/com.intego.app.netbarrier.firewall.extension.systemextension

This is an extremely dangerous command you just suggested and overkill as well. There is no need to have the "-r" option which will recurse through folders. If the user makes a mistake with the path, it could wipe out a lot more than is intended. I am assuming the extension you listed is just a single file and not a bundle folder.


Plus, when deleting a single file, especially with a "-f" force option, it is wise to add the "-i" option so that the user is prompted to confirm the deletion as it will print the item about to be deleted. When used with the "-r" option, this could alert the user to a problem if more than one item is prompted for deletion...of course they may not realize it until the second item is prompted, but it will minimize the damage if caught.


Keep in mind most people reading these posts will not be familiar with the command line and the risks involved by a simple mistake.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Can't delete a system extension

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.