- Products
- Learn
- Local User Groups
- Partners
- More
The State of Ransomware Q1 2026
Key Trends and Their Impact
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
You can see if the launchd service is still installed for it:
sudo launchctl list com.checkpoint.epc.service
You can unload it if is loaded:
sudo launchctl unload /Library/LaunchDaemons/com.checkpoint.epc.service.plist
If you need to remove the service startup script manually, it's there in "/Library/LaunchDaemons/com.checkpoint.epc.service.plist".
This is the Mac's version of the Linux systemd (or SysV init) scripts. Keep in mind, tho, that by default, a lot of these system folders are hidden by default on macOS, so a lot of the times a cursory scan won't show anything. You'll have to navigate directly using the Finder's "Go to Folder" option:
If none of this helps, then you just might need to open a TAC case to figure out what's still embedded.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY