Is XProtect.app an authentic macOS application? ClamXAV finds trojan in XProtect

ClamXAV says that it found a trojan in XProtect.app called

Trojan.OSX.Generic in the pathway:

/Library/Apple/System/Library/CoreServices/XProtect.app

Is XProtect.app a genuine macOS file? Some posts that I found say that

only XProtect.bundle is a legitimate macOS file. Please help! Should I

delete it? MalwareBytes finds nothing on my mac!

thank you

iMac 27″, macOS 12.3

Posted on Mar 16, 2022 8:40 PM

Similar questions

3 replies

dialabrain

Level 10

138,051 points

Mar 16, 2022 9:00 PM in response to find answer

Yes it's a standard file. There are two XProtect files in the folder. One is an app and one is a bundle.

Now you should uninstall ClamXAV.

dialabrain

Level 10

138,051 points

Mar 16, 2022 9:16 PM in response to find answer

And this: Protecting against malware in macOS - Apple Support

dialabrain

Level 10

138,051 points

Mar 16, 2022 9:11 PM in response to find answer

You should also read this: Effective defenses against malware and ot… - Apple Community

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Is XProtect.app an authentic macOS application? ClamXAV finds trojan in XProtect