How do I view the Xprotect definitions?

Med.amine wrote:

last modified jeudi 13 octobre 2011 07:31

Sorry, I gave you the wrong file, but the date looks right.

Check

/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.p list

which should give you both the last modification date and version number.

ok , that's waht i have , in xprotect.meta.plist :

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>LastModification</key>

<string>Tue, 11 Oct 2011 16:20:51 GMT</string>

<key>Version</key>

<integer>1010</integer>

</dict>

</plist>

That's a really loaded question. If the metadata file matches the one posted by Med.amine and if the rest of the Apple XProtect system is working properly you should be notified if you attempt to launch any of the files Apple knows to be Mac OS X malware. That doesn't include either of the latest malware reported in the past few days by ESET (Tsunami) and Intego (DevilRobber) which most Mac users should never see. You will never be 100% protected against everything.

I have an app for that 🙂http://www.macmark.de/apps/wallsoftroy.php