2

I am trying to remove a kernel extension but every time i restart it keeps coming back how to permanently remove it?

i believe this com.ab.kl.engine is some sort of spyware

output of: kextstat | grep -v com.apple

  104    0 0xffffff7f81fa3000 0x4000     0x4000     com.ab.kl.engine (1) <34 4 3>

available extensions in /Library/Extensions:

ACS6x.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
LittleSnitch.kext
PromiseSTEX.kext
SoftRAID.kext

any idea how to get rid of com.ab.kl.engine permanently?

oortcloud_domicile
  • 123

1 Answers1

2

How did you try to remove it? Also there are more than one place an extension can live/hide. I would check /System & /Library.

You can use kextunload like this...

sudo kextunload /System/Library/Extensions/extension_name_here.kext

Or at the filesystem level 

mount -uw /
rm -rf /System/Library/Extensions/extension_name_here.kext
  or
rm -rf /Library/Extensions/extension_name_here.kext

If after doing these are you still seeing the extension loaded?

Dan Pritts
  • 1,069
dors
  • 199