Should "XProtect" be unchecked and requesting permission on 12.6 fresh install?

Hello,

It's up to you whether you want XProtect to have full disk access or not. By default, it is turned off but XProtect is still able to search your Mac for malware. You can learn more about how Mac protects you from malware here: Protecting against malware in macOS - Apple Support

Thanks for reaching out!

-Drake

Part 1 of 2

There are no known Windows-like Viruses in the wild that self replicate and affect macOS, because of the underling UNIX  Foundation and Permission Limitation. 

Additionally, and specific to Big Sur macOS 11 and Monterey macOS 12, the Operating System resides in a Sealed and Read Only Volume that can not be opened by the User and protects against from “ Bad Actor “ Software.

The The Built in Security  is all that is required to protect the computer.

There is Adware & Malware which will affect the computer and is generally downloaded from “ Shady “ Websites or Developers who Inject this software into the download.

Should “ Certain & Specific Software “ referenced from above be installed - it will negatively impact macOS. It is suggested, download directly from the Developer , the application Malwarebytes for Mac. 

It is free or paid for added features. 

Run the Application and it should remove the malware / adware. Once done, restart computer and test.

Part 2 of 2

The Only thing this Antivirus software is protecting is the Bank Account of the Developers and for zero return to the User aside from the problems this software creates.

AntiVirus Developers purposefully Market their product to create a “ Fear Factor “. In so doing, creating a False Need for their Product.

Certain Applications maybe available on the Apple Apps Store - this only means the Developer is prepared to pay Apple a portion on each sale. What the Application may do to the computer is up to the User to check this out before purchase

Any of the below should be removed as per Developers Instructions 

This will include CleanMyMac , This will include BitDefender , 

This will included Norton Antivirus , Sophos Av Software

Intego AntiVirus, McAfee, MacKeeper, Avast AntiVirus

Ad Guard, Webroot , ESET , Avira 

AVG AntiVirus  

Trustee  

Read some of the posting and arrive at your own conclusions.

Can you take a step back and clarify what you are asking about? In you first post you asked about XProtect showing up in the Full Disk Access list. That’s totally normal.

But now, you are dating that XProtect is asking for permission to do something? That’s extraordinarily unusual.

And you are asking about some third party tool that has a file called “EICAR Test File (Not a Virus)”? You would have to direct that question to the developers of said tool. You haven’t even told us what tool that is. It is quite dangerous to go downloading “security” tools. The industry is full of scams and even a few malware apps.

In fact, it is extremely unusual for malware to pretend to be anything other than malware. It is ridiculously easy to spot. Curious, eh?

To reiterate, it is perfectly normal to have XProtect listed in Full Disk Access. If you have a follow up question, please be specific.