How do I view the Xprotect definitions?
I just wondering how to view the Xprotect definitions. Thanks to anyone that could give input.
You can make a difference in the Apple Support Community!
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
I just wondering how to view the Xprotect definitions. Thanks to anyone that could give input.
Hi 🙂
if you mean the Xprotect.plist file
use Finder-Go-Go to Folder (Command-Shift-G) and enter
/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/
then select xprotect.plist & press the Space key
entering
/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.plist
into Safari's address bar should do the same, and show the file ready-selected.
or at least that works on Snow - I haven't specifically looked in Lion
Med.amine wrote:
last modified jeudi 13 octobre 2011 07:31
Sorry, I gave you the wrong file, but the date looks right.
Check
/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.p list
which should give you both the last modification date and version number.
ok , that's waht i have , in xprotect.meta.plist :
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>LastModification</key>
<string>Tue, 11 Oct 2011 16:20:51 GMT</string>
<key>Version</key>
<integer>1010</integer>
</dict>
</plist>
So if have the meta data and the plist i am 100% protected?
That's a really loaded question. If the metadata file matches the one posted by Med.amine and if the rest of the Apple XProtect system is working properly you should be notified if you attempt to launch any of the files Apple knows to be Mac OS X malware. That doesn't include either of the latest malware reported in the past few days by ESET (Tsunami) and Intego (DevilRobber) which most Mac users should never see. You will never be 100% protected against everything.
I have an app for that 🙂http://www.macmark.de/apps/wallsoftroy.php
How do I view the Xprotect definitions?