Bug report: Sophos uninstall

---

mschmitt wrote:

Running the Remove Sophos Anti-Virus app deletes the two kernel extensions (SophosNetworkInterceptor.kext and SophosOnAccessInterceptor.kex), but doesn't unload the running kexts or prompt for a reboot:

$ kextstat | grep "sophos"

  128    0 0xffffff7f807e6000 0x7000     0x7000     com.sophos.nke.swi (9.0.53) <4 3 1>

  142    0 0xffffff7f807c1000 0x5000     0x5000     com.sophos.kext.sav (9.0.61) <5 4 1>

---

Known issue. In some versions of Mac OS X the system reacts very poorly when ripping out the kext. What we do now is to tell the kext code "stop what you are doing" and wait for the next system reboot. There should be no bad side effects.

We could probably suggest to reboot at the end of the uninstall, but generally its not immediately necessary. Its been a long debate within the team about what is the "right" thing to do. Technically, we should tell people to reboot. But having to reboot unnecessarily is very un-Mac-like.

Situation was that Apple Engineering wanted me to reproduce a problem with Sophos completely removed, and they rejected the report because the troubleshooting log had the kextstat output.

---

mschmitt wrote:

Situation was that Apple Engineering wanted me to reproduce a problem with Sophos completely removed, and they rejected the report because the troubleshooting log had the kextstat output.

---

Makes sense, and sorry for the trouble and/or confusion.