The following states the problem: a kext with the identifier aluveitie.RadeonSensor is loaded but I cannot find the actual file. kextutil hints that it used to be at /Library/Extensions/RadeonSensor.kext, and indeed I did install that a long while ago, and removed it. The machine has been rebooted many times since then: why does that kext still load? And load from where?

~% kmutil showloaded|egrep -i aluveitie                                                                          
No variant specified, falling back to release
   53    0 0                  0x14000    0x14000    aluveitie.RadeonSensor (0.3.3) C05A7C6F-BD34-300A-9139-C53245A18CAA 

~% kmutil find -b aluveitie.RadeonSensor                                                                         
No variant specified, falling back to release

~% sudo kextutil -bundle-id aluveitie.RadeonSensor                                                               
Executing: /usr/bin/kmutil load --bundle-identifier aluveitie.RadeonSensor
Error Domain=KMErrorDomain Code=71 "Could not find: Extension 'aluveitie.RadeonSensor' not found at: /Library/Extensions/RadeonSensor.kext" UserInfo={NSLocalizedDescription=Could not find: Extension 'aluveitie.RadeonSensor' not found at: /Library/Extensions/RadeonSensor.kext}

**Update** This is on MacOS Big Sur. The file is nowhere to be found. So the only explanation left is that this kext is still in the kernel cache, and that MacOS did not purge it from there for reasons I can't explain. A clue: I found out that unloading it fails:

~% sudo kmutil unload -b aluveitie.RadeonSensor                                                          
Error Domain=KMErrorDomain Code=71 "Kernel request failed: (libkern/kext) kext is in use or retained (cannot unload) (-603946984)"

I've developed a kernel-extension and I'd like to load it in all possible modes which are Recovery-Mode, Safe boot and of course Normal mode. When I stored my kext bundle In /Library/Extensions From normal mode, and then restart my machine and move to Recovery Mode, I couldn't find my kext in /Library/Extensions and therefore I tend to believe that Recovery Mode uses different partition. My question is how can I access this partition from Normal mode, so when I install my driver, I can also place it where prelinked kernel can load it in Recovery Mode as well ?

Despite repeated attempts of following the official guide , as well as researching the internet , I cannot successfully uninstall the system extension, and it keeps re-appearing in EtreCheck reports: System Extensions: [Blocked] AdGuard Network Extension - version 2.8.1 (Adguard Software Limited) Application: /Applications/Adguard.app - version 2.8.1 (Not found!) Description: AdGuard Network Extension I cannot identify the remaining files on the computer that indicate the system extension is present. Each new report does indicate this issue despite that. Perhaps there is an operation needed on root, not user? I am on MacOS 14.4.1 and this system extension has been lingering on system for almost 2 years.

I just updated my OS to Mac OS Sequoia Version 15.3.2 (24D81). After the reboot and update, it gave me a pop up saying there's a system extension from "Apple Inc." that I need to give permission to. This is highly suspicious, of course. I looked at the list of system extensions under system report, but they are all last modified "March 6, 2025" and "Loaded". There's nothing under legacy software. I skimmed through the system.log and dmesg and didn't see anything obvious. **How do I find out what has been blocked** so that I can decide if I should Allow it or not? (there's also no option for declining to allow this which is an odd UX design.) Edit: I found similar questions. * https://apple.stackexchange.com/q/413096/47020 * https://www.reddit.com/r/MacOS/comments/sntyba/mystery_apple_inc_system_extension_allow_it_or_not/ * https://delu.co/posts/system-software-from-developer-apple-inc.-has-been-updated/ * https://talk.tidbits.com/t/mystery-apple-inc-extension-wants-approval/22662/2

In Windows you can replace the file transfer process/dialog/system with a program like Teracopy. While I don't use Teracopy in Windows, the default file transfer system in Finder is lacking features to make large file transfers faster & ergonomic. For example, it's not parallel, which is helpful in speeding up moving files between folders on the same NFS or SMB mount. It's also nice to have a transfer list, non-interactive mode and transfer statistics (like transfer speed and so on). I am thinking of writing my own implementation, but I am unsure if MacOS offers the ability to replace the default file transfer mechanism with a custom one. Does anyone know if that is possible without writing a custom kernel extension?

Intel mobile CPUs now have a really low base frequency and a high Turbo Boost freq, e.g. i5 2.4~4.1 GHz. Turbo at 3.8+ makes it go all the way up to 100°C. Using 'Turbo Boost Switcher' to disable TB makes the freq too low at 2.4. Is there any way to limit CPU freq at some intermediate value like 3.2?

When I rebooted my MBP (Catalina), I got this error message When I jumped into the System Preferences, this is what I see It does not give me a lot of information where the extension comes from. How can I identify which extension it is? If I can identify it, then I will know if I still need it or not.

I have a Macbook Pro 2015, which I mainly use for some light-weight coding and webbrowsing. It has unfortunately, for a long time, been incredibly slow. I read this solution posted here about replacing the kext files. However nowhere on the internet I can find an answer as to how to replace KEXT files on a legit macos install. Could someone inform me on how to obtain the El Capitan KEXT files and where to locate the KEXT files in Monterey so I can replace them? --- I have realised for a long time that my Macbook is extremely slow. It is not even possible to watch a youtube video on 720p without it causing lagging or other issues. I never really had issues with this before as I was not using the laptop often. However, due to circumstances I tend to use it a bit more lately and hence was looking for a solution, as the extremely slow speeds are not in line with what I am used to from this laptop. I tried reinstalling the OS multiple times, but without any results (there is literally only microsoft office and google chrome installed on that laptop at the moment). I did some research and noticed a lot of people are facing this issue, and the issue is not there with MacOS El Capitan. I also vaguely remember that the speed issue indeed arose after an update back in the day. I thought about just installing El Capitan, but since it is no longer supported assume that applications will no longer be supported for that OS. That is what led me to the story with the KEXT files. From my understanding of the linked post, the bug is in how the newer drivers operate with this specific Macbook. I was hoping that by reverting back to these old files, I would be able to gain some increases in speed on my Macbook. Another alternative I am considering if nothing comes from this is to order an m.2 + adapter for the Macbook and installing Linux on that, however I would like to not incurr many costs as I am only using the laptop around 1 to 2 weekends a month. Hence the rabbit hole I went down. I hope this clarifies the situation and provides the requested additional information

I am writing docs and need to go through full install many times… once approved, I no longer need to approve KEXT in “Security & Privacy” which makes runs non-reproducible. This question is to address: How to unapprove KEXT system extension on macOS?

This item just appeared after a Microsoft update. "Distant Future Corp" has a couple of apps on the app store and only a few staff. They appear to deal with sharing of things like [link collections](https://deckr.surf/) , but it’s hard to find out much about them or their CEO(?) [Steve Gehrman](https://www.datanyze.com/people/Steven-Gehrman/168039910) (as a Flutter developer he has a [GitHub account](https://github.com/sgehrman) and allied company [Cocoatech](https://cocoatech.com/about-cocoatech/#/) developed Path Finder, which I brew installed and then uninstalled—awhile before this MS addition—as it failed to do what I needed). It seems impossible from an hour or more searching to find out why Microsoft has added this to my startup items, or what that company has to do with Microsoft. For now I’ve turned it off. Anyone know any more?

The inline volume up button on my Apple headphones randomly engages sometimes, which raises my mid-2013 Macbook Air's volume to the max. This is bad for my hearing and can be quite startling. Is there a way to disable the volume controls?

My MBA 2017 with Monterey 12.7 frequently just shuts-down No messages just black screen. Hardware test shows nothing New Monterey install does noting Shutdowns have no pattern, it even happens in Sleep mode It works fine in Safe mode. Reseting SMC/NVRAM does not help Terminal report shows following Console reports show nothing of interest, or I missed it The way I read that is a "some kernel send request to AppleSMC to shut down". Makes sense since the OS can not shut down but the SMC been the power controller can. Right now I am trying to find out witch Kernels are loaded that are not Apple, how do I do that ?

Once a user grants macOS permission to run a third-party's kernel extensions, all extensions signed by that developer's key are allowed to run. Even if the extension is erased and reinstalled, permission remains. How does one subsequently **revoke permission** to run one or all third-party kernel extensions? This is not a request for how to unload kernel extensions. Assume, for example, that a developer wishes repeatable QA around the process of installing and prompting a user to authorize a kernel extension.

I have a M1 Mac. In order to install a legacy kernel extension needed for a peripheral, I have changed my startup disk security settings to "Reduced Security" as detailed here: https://support.apple.com/guide/mac-help/change-security-settings-startup-disk-a-mac-mchl768f7291/mac My question is: does the startup disk security setting of "Reduced Security", or the installation of legacy kernel extensions, have any effect on the always on disk encryption of the startup disk? Specifically, if I choose to wipe the disk by selecting "erase all content and settings", will the encryption keys still be securely erased?

For solving a problem with a drive, I had to uninstall/unload an external SSD Samsung driver. Doing this, was reasonable easy: disable SIP in Recover (csrutil disable), rebooting, sudo kextunload /..., then rm -rf /.... Driver unloaded and gone. I backuped the driver thinking doing the opposite was that trivial, but looks it's not. I copied back the file in: /Library/Extensions, then I tried to reload the driver. I tried with sudo (sudo kextload /Library/Extensions/SamsungPortableSSDDriver.kext), disabling again SIP, even from root shell (sudo -i). Nothing seems to work. This is the error message: Filesystem error: Invalid ownership (501:0) should be (0:0) on /Library/Extensions/SamsungPortableSSDDriver.kext Any clue? Thank you.

In macOS High Sierra, System Prefs > Security, it says "Some system software was blocked from loading. I see a list there of three developers, and I don't recognize all of them. I'm guessing these are kext files in /L/E or /S/L/E, but how can I identify exactly which kext corresponds to each developer name? I tried grep -rn "Intel Corporation Apps" /System/Library/Extensions but that doesn't find it. EDIT: Adding to this question because it was never fully answered and I have now encountered another stubborn kext I can't remove in Mojave. It appears in Disabled Software but not in System Preferences security pane. I have grepped /L/E and /S/L/E and /Library/StagedExtensions and the only result I find is in /System/Library/Extensions/AppleKextExcludeList.kext/Contents/Info.plist kextutil can't find it so where else can I look?: # kextutil -b cn.com.bwstor.filesystems.enfs Can't find extension with identifier cn.com.bwstor.filesystems.enfs

While cleaning some software off my computer, I noticed the following extensions listed in System Information → Software → Extensions. For context, I am running an M2 Max MacBook Pro with MacOS Ventura 13.4. I did not ever install applications by "HighPoint Technologies" or "Other World Computing," and I certainly never approved the activation of system software by either of these developers. **Can someone tell me what these pieces of software are, whether they should be on my Mac, and—if not—how I can get rid of them?** > **HighPointIOP:** > > Version: 4.4.5 > Last Modified: 2023-05-12, 18:29 > Bundle ID: com.highpoint-tech.kext.HighPointIOP > Notarized: Yes > Loaded: No > Get Info String: Version: 4.4.5, Copyright (c) 2020 HighPoint Technologies, Inc. > Obtained from: Identified Developer > Kind: Intel > Architectures: x86_64 > 64-Bit (Intel): Yes > Location: /Library/Extensions/HighPointIOP.kext > Kext Version: 4.4.5 > Loadable: Yes > Dependencies: Incomplete > Dependency Errors: > Dependency Resolution Failures: > Indirect dependencies can't be resolved: com.apple.iokit.IOSCSIParallelFamily, com.apple.iokit.IOPCIFamily > Signed by: Developer ID Application: HighPoint Technologies, Inc (DX6G69M9N2), Developer ID Certification Authority, Apple Root CA > > **HighPointRR:** > > Version: 4.22.1 > Last Modified: 2023-05-12, 18:29 > Bundle ID: com.highpoint-tech.kext.HighPointRR > Notarized: Yes > Loaded: No > Get Info String: Version: 4.22.1, Copyright (c) 2020 HighPoint Technologies, Inc. > Obtained from: Identified Developer > Kind: Intel > Architectures: x86_64 > 64-Bit (Intel): Yes > Location: /Library/Extensions/HighPointRR.kext > Kext Version: 4.22.1 > Loadable: Yes > Dependencies: Incomplete > Dependency Errors: > Dependency Resolution Failures: > Indirect dependencies can't be resolved: com.apple.iokit.IOSCSIParallelFamily, com.apple.iokit.IOPCIFamily > Signed by: Developer ID Application: HighPoint Technologies, Inc (DX6G69M9N2), Developer ID Certification Authority, Apple Root CA > > **SoftRAID:** > > Version: 6.3.1 > Last Modified: 2023-02-09, 04:39 > Bundle ID: com.softraid.driver.SoftRAID > Notarized: Yes > Loaded: No > Get Info String: SoftRAID version 6.3.1, Copyright © 2002-22 Other World Computing, Inc. All rights reserved. > Obtained from: Identified Developer > Kind: Intel > Architectures: x86_64 > 64-Bit (Intel): Yes > Location: /Library/Extensions/SoftRAID.kext > Kext Version: 6.3.1 > Loadable: Yes > Dependencies: Incomplete > Dependency Errors: > Dependency Resolution Failures: > Indirect dependencies can't be resolved: com.apple.iokit.IOStorageFamily > Signed by: Developer ID Application: Other World Computing (Q9P8K45M5C), Developer ID Certification Authority, Apple Root CA

****MBP 2020 M1, OS: Big Sur 11.7.9**** My mac started malfunctioning lately: this morning I opened the lid and was greeted by the recovery screen telling me that there was a problem with the computer. I dismissed the warning and tried to start my mac as usual. It managed to boot with no issues but right after I prompted my password, it hung: It freezes for about 2 minutes and then reboots. Needless to say that this cycle is never ending. I reinstalled the OS from the recovery screen and and seemed to fix the problem. After logging in there was a notification saying: Also, it gave me quite a lengthy log-file panic(cpu 0 caller 0xfffffe002921ddcc): "busy timeout, (60s): 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUserClient', 'RootDomainUser" Debugger message: panic Memory ID: 0x6 OS release type: User OS version: 20G1426 Kernel version: Darwin Kernel Version 20.6.0: Thu Jul 6 22:12:47 PDT 2023; root:xnu-7195.141.49.702.12~1/RELEASE_ARM64_T8101 Fileset Kernelcache UUID: 64500501AB4C8A39523312AE79C8C6F4 Kernel UUID: 2955FDA5-5B8C-3F0F-B10C-785F74C833B1 iBoot version: iBoot-6723.140.2 secure boot?: YES Paniclog version: 13 KernelCache slide: 0x0000000020f08000 KernelCache base: 0xfffffe0027f0c000 Kernel slide: 0x0000000021a50000 Kernel text base: 0xfffffe0028a54000 Kernel text exec base: 0xfffffe0028b20000 mach_absolute_time: 0xb2958b97 Epoch Time: sec usec Boot : 0x64f30607 0x0007eacb Sleep : 0x00000000 0x00000000 Wake : 0x00000000 0x00000000 Calendar: 0x64f3067e 0x0004732a CORE 0 recently retired instr at 0xfffffe0028c926d0 CORE 1 recently retired instr at 0xfffffe0028c93d98 CORE 2 recently retired instr at 0xfffffe0028c93d98 CORE 3 recently retired instr at 0xfffffe0028c93d98 CORE 4 recently retired instr at 0xfffffe0028c93d9c CORE 5 recently retired instr at 0xfffffe0028c93d9c CORE 6 recently retired instr at 0xfffffe0028c93d9c CORE 7 recently retired instr at 0xfffffe0028c93d9c CORE 0 PVH locks held: None CORE 1 PVH locks held: None CORE 2 PVH locks held: None CORE 3 PVH locks held: None CORE 4 PVH locks held: None CORE 5 PVH locks held: None CORE 6 PVH locks held: None CORE 7 PVH locks held: None CORE 0 is the one that panicked. Check the full backtrace for details. CORE 1: PC=0xfffffe0028b99a90, LR=0xfffffe0028b99a88, FP=0xfffffe3fe36a3ee0 CORE 2: PC=0xfffffe0028b99a90, LR=0xfffffe0028b99a88, FP=0xfffffe3fe4fe3ee0 CORE 3: PC=0xfffffe0028b99a90, LR=0xfffffe0028b99a88, FP=0xfffffe3fe36c3ee0 CORE 4: PC=0xfffffe0028b99a90, LR=0xfffffe0028b99a88, FP=0xfffffe3fe4f5bee0 CORE 5: PC=0xfffffe0028b99a90, LR=0xfffffe0028b99a88, FP=0xfffffe3fe35fbee0 CORE 6: PC=0xfffffe0028b99a90, LR=0xfffffe0028b99a88, FP=0xfffffe3fe3ff3ee0 CORE 7: PC=0xfffffe0028b99a90, LR=0xfffffe0028b99a88, FP=0xfffffe3fe3623ee0 Panicked task 0xfffffe16686247d8: 245 pages, 4 threads: pid 309: watchdogd Panicked thread: 0xfffffe16683e5348, backtrace: 0xfffffe3fe36f3520, tid: 3206 lr: 0xfffffe0028b6eb4c fp: 0xfffffe3fe36f3590 lr: 0xfffffe0028b6e930 fp: 0xfffffe3fe36f3600 lr: 0xfffffe0028c991f4 fp: 0xfffffe3fe36f3620 lr: 0xfffffe0028c8a678 fp: 0xfffffe3fe36f36d0 lr: 0xfffffe0028b277e8 fp: 0xfffffe3fe36f36e0 lr: 0xfffffe0028b6e5c0 fp: 0xfffffe3fe36f3a70 lr: 0xfffffe0028b6e5c0 fp: 0xfffffe3fe36f3ae0 lr: 0xfffffe0029323944 fp: 0xfffffe3fe36f3b00 lr: 0xfffffe002921ddcc fp: 0xfffffe3fe36f3ba0 lr: 0xfffffe0028c5ea2c fp: 0xfffffe3fe36f3bd0 lr: 0xfffffe0028b7429c fp: 0xfffffe3fe36f3c40 lr: 0xfffffe0028b4ba98 fp: 0xfffffe3fe36f3cc0 lr: 0xfffffe0028b64710 fp: 0xfffffe3fe36f3d70 lr: 0xfffffe0028c7f000 fp: 0xfffffe3fe36f3e40 lr: 0xfffffe0028c8a6f4 fp: 0xfffffe3fe36f3ef0 lr: 0xfffffe0028b277e8 fp: 0xfffffe3fe36f3f00 last started kext at 1587625269: com.apple.filesystems.autofs 3.0 (addr 0xfffffe00289cc000, size 16384) loaded kexts: *listing loads of apple's kexts* I thought the problem was gone, closed the lid (it went to sleep), but when I returned home the very same thing happened - the greetings from the recovery screen, inability to log in... Had to do the recover my computer again. I really don't know what to do. If it really has to do with some sort of kernel extension, how to turn it off then by default? In addition, when the computer is messed up the touch bar goes flickering for no good reason. What seems to be the problem and how to troubleshoot and solve it? I don't want to turn off the sleep mode, so my mac is up all the time.

A **long** time ago, I installed Paragon's NTFS drivers.  But I no longer any NTFS drives (since almost as long). But yesterday, I had a few apps open, and GraphicConverter had the focus, when this popped up: There is no reason I can think of for any program that was running to suddenly try to do anything with NTFS.  **How can I identify "A program" when it does something like this?**

I try to remove **macFUSE** from my system, and I deleted the followings already: - /Library/Filesystems/macfuse.fs - /Library/Frameworks/macFUSE.framework Then I found a directory as /Library/StagedExtensions/Library/Filesystems/macfuse.fs. Naturally I tried to run sudo rm -rf /Library/StagedExtensions/Library/Filesystems/macfuse.fs but I got Operation not permitted. How do I delete them? I'm using Monterey (12.4) on Apple M1 Pro.