6/8/11
4:34 pm

Forum Question: Where are malware definitions?

When Apple first added malware definitions I was able to look them up in the library and verify their installation.
With the new macdefender def I wanted to verify it’s on my mac but forget what folder they were in.
Where are these defs?
—–
Bruce

Comments: 3 Responses to “Where are malware definitions?”

    6/8/11 @ 4:50 pm

    I don’t know if you can find them. They are probably hidden or even encrypted maybe? Otherwise, it would be very easy for malware “developers” to get around them.
    But you can check to see when you last checked for a definition update with this terminal command:
    defaults read /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta LastModification
    And I think you can force an update with:
    sudo /usr/libexec/XProtectUpdater

    Bruce
    6/10/11 @ 5:03 pm

    I found this today but don’t have a program that will open it. Text edit won’t work.

    http://www.macworld.com/article/160470/2011/06/malware_def_current.html

      6/10/11 @ 5:21 pm

      So it is here:
      /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.plist
      It actually does open in TextEdit, once you get to the .plist file.

Comments Closed.