Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
Disable McAffee Endpoint Protection OSX

method 1

sudo /usr/local/McAfee/AntiMalware/VSControl stopoas


sudo defaults write /Library/Preferences/com.mcafee.ssm.antimalware.plist OAS_Enable -bool False
sudo /usr/local/McAfee/AntiMalware/VSControl stop
sudo /usr/local/McAfee/AntiMalware/VSControl reload

Or completely uninstall:

sudo -s
cd /usr/local/McAfee/
./uninstall EPM
Copy link

mathiasrw commented Aug 4, 2016


Copy link

nowells commented Dec 15, 2016

This is fantastic. Really helps to run this before I run benchmarks.

Copy link

clattems commented Jan 26, 2017

Thank you so much for this! :) You're my hero lol

Copy link

Tv8 commented Mar 3, 2017

That was a great help. Thank you 👍

Copy link

Murali54 commented Jun 7, 2017

Thank you!

Copy link

at88mph commented Jul 14, 2017

This is great, thanks. The stop works, but can you think of a reason the ./uninstall EPM script would hang? This is McAfee 2.2.

Copy link

NickWarrior commented Jul 28, 2017

Good Job!

Copy link

5ay3h commented Jul 30, 2017

@tegansnyder, fix for "completely uninstall": sudo /Library/McAfee/cma/scripts/ (source)

Copy link

joshoohaah commented Jan 18, 2018

This came up again in my google search..and it indeed worked on macOS 10.12.16. Many thanks

Copy link

simplymarcello commented Feb 17, 2018

Just what I needed! Thanks

Copy link

hari-haran commented Mar 14, 2018

Thank you!

Copy link

smarkars commented Aug 23, 2018

Perfect! Thanks!


Copy link

mrvincenzo commented Dec 23, 2018

Few more tricks. I had to run each of them twice.

To disable Firewall

sudo /usr/local/McAfee/StatefulFirewall/bin/StatefullFirewallControl stop

To disable WebProtection

sudo /usr/local/McAfee/WebProtection/bin/WPControl stop

Copy link

devofer commented Dec 27, 2018

Thank you!!

Copy link

benmingli commented Jan 7, 2019

Love it... although

Copy link

miguel-orange commented Feb 8, 2019

Thank you so much!

Copy link

Yorkshireman commented May 3, 2019

Thank the lord - this was driving me insane. My system is Sierra 10.12.6

Copy link

ghost commented May 14, 2019

Thank you all!

Copy link

trinitronx commented Jun 27, 2019

McAfee on our team's company managed Macbook laptops suddenly start using > 100% RAM on our machines, causing swapping, applications to freeze and eventually complete machine lockup. It's been a huge productivity killer.

Ran everything except the last uninstall command, lest this is not allowed, but the McAfee processes keep respawning! It's like the anti-virus software is acting like a virus in and of itself?! Then it's only a matter of time until they eat up all the machine's resources again.

It appears that there are also:

  • LaunchDaemons
  • LaunchAgents
  • Kernel extensions (Mac's version of kernel modules)

The first thing restarted seems to be a kernel module called com.McAfee.FMPSysCore.

Running these commands frequently in a loop shows that it's the first thing that comes back:

sudo ps auxww | grep -i 'VShieldScanner\|VShieldScanManager\|masvc\|McAfee' | grep -v grep   | awk '{ print $2 }'  | sudo xargs kill -9     ;   kextstat  | grep -i mcafee | awk '{ print $6 }'  | sudo xargs -n1 -I{} kextunload -verbose 2 -bundle-id '{}'

I still haven't found a way to 100% disable them, and don't want to resort to full uninstall yet... still waiting on helpdesk ticket to see what they say.

Copy link

strugs commented Oct 25, 2019

Thank you very much!
McAfee Endpoint Security for Mac Threat Protection v10.2.3 on macOS 10.14.6 drove my startup time to a near standstill. Disabling Threat Protection has made startup snappy once again.

The 'alternatively' commands above did the trick.

Thank you again!

Copy link

linuxtechie commented Apr 30, 2020

Thank U
Thank U
Thank U!

My insanity has been restored!


Copy link

jeanraymonddaher commented Jul 27, 2020

thank you very useful

Copy link

montaro commented Nov 3, 2020


Copy link

cchwala commented Aug 17, 2021


Copy link

arc41t3ct commented Nov 20, 2021

One more thing that can be done is to turn off the KeepAlive in the plist of all mcafee files in /Library/LaunchDaemons. Once you restart you machine then you can just kill all the processes. This is useful because you can use a script on startup to disable them and if you Corporate IT notices you just restart without running the script and the system is back to normal running this piece of 5!-!!t software.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment