XProtectUpdater info

Well, how about that - I ran the update 3 days ago, and found it interesting that the definitions were not updated (actually, they weren't created the first time) until I used the tip in that article. Thanks for posting this - it is a good reminder (I just figured the initial definitions were in the update itself).

These kind of cat-and-mouse things will always be a little out of sync, so a person should always be wary about installing any application - especially one that you weren't specifically looking for and/or comes from an unknown source. I'm still waiting to come across one of these trojans though, just to see what all the hoopla is about.

I found another useful article, Apple Safe Files List: Staying On Top of Malware Definitions.

It contains a link to a downloadable little app, Safe Download Version, which immediately tells you the version number of your current definition list and the last time the list was updated:

It essentially just gives more convenient access to the contents of this file:

/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.p list

I also just looked again at the list itself, which is at:

/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.plist

A new item, OSX.MacDefender.E, has been added since yesterday.

(this editor is flaky - I can't get rid of the extra space in the first file's .plist extension)

I have checked and my last update was one week ago. I went to system pref and unchecked waited 20 sec then rechecked auto update. after waiting 2 min. I looked and the latest update was still listed as 1 week ago.

What next ???

Thanks for help

The definitions aren't updated daily, just as needed. I show the latest at version 21, dated June 23, that includes up to MacDefender.O - maybe those malware guys got a little tired, or took off for the holidays or something.

Thanks for the prompt reply. Is there an easy way to know what the latest version is? Then I can check when I am worried 😁:-))

Thanks

You will just need to check, since the definitions can be updated at any time. There are a few AppleScripts around that will check and update the version, such as Safe Download.

I am sorry I didn't state my question clearly. I know how to check to see which update is on my mac book. My question is how do I check to see what the latest update that is available might be. Today I checked and it said the last update was June 23. I [incorrectly] assumed that was not the latest but don't know how to determine what the latest available might be.

Thanks.

I don't think there is a list that shows what the latest update is, since it is only updated as needed and is supposed to be automatic, so you will probably need to just check and compare with what you have.

Thank you very much for your patience and information. I did download the Safe Download app. Thanks

bakins wrote:

Is there an easy way to know what the latest version is?

Yes. In a browser you can load the same web location that the XProtectUpdater executable should be checking for that info: http://configuration.apple.com/configurations/macosx/xprotect/1/clientConfigurat ion.plist.

A little below the 'signature' section is the current version 'key,' & just below that is the version number, as shown below.