Skip to Content

Force your Mac to update malware definitions (Updated)

You've updated your Mac with Security Update 2011-003, but how do you know if you have the latest malware definitions from Apple?

Macworld had a nice technical note on how to force your Mac to update its malware definitions, so we thought we'd pass that knowledge along. To start, you can check to see how old your malware definitions are by launching Terminal (found in your Utilities folder in the Applications folder), copying the following code, pasting it into Terminal at the prompt, and then pressing the Return key:

more /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist

In my case, this command returned the following:

See that date and time hiding in the middle of that Terminal output? They show the last time my malware definitions were updated, in this case on May 26. To force my Mac to update its malware definitions, I launched System Preferences > Security > General, and then unchecked and re-checked the box in front of "Automatically update safe downloads list."

Now after pasting that command into Terminal again and pressing Return, I see that the latest malware definition was sent today:

After the last security update from Apple, the system is supposed to check daily for updates to the OS X malware definitions. This little tip insures that you ultra-paranoid types can update more often than that.

Update: Adam Christianson of The MacCast wrote up a nice little Mac app to check the version and date (in your local time, not GMT) of the latest malware definition update on your machine. You'll still have to force the update using the method described, but this app keeps you from having to launch Terminal. The app is available here (download link), courtesy of The Mac Observer.



Categories

Mac OS X

You've updated your Mac with Security Update 2011-003, but how do you know if you have the latest malware definitions from...
 

Add a Comment

*0 / 3000 Character Maximum Comment Moderation Enabled. Your comment will appear after it is cleared by an editor.

11 Comments

Filter by:
greybeard6005

Paranoia big destroya....

Uncheck "Open Safe Files" and move on....

June 04 2011 at 8:19 PM Report abuse rate up rate down Reply
JustinR

If you are already in Terminal, just run "sudo /usr/libexec/XProtectUpdater" and it will update. No need to click, unclick.

June 03 2011 at 2:56 PM Report abuse rate up rate down Reply
mbabco@earthlink.net

I am running System 10.6.7. When I go to System Preferences > Security > General I have the following options:

Require password . . .
Disable automatic login
Require a password to unlock each Systems Preferenc pane
Log out . . .
Sue secure virtual memory

Disable Location services
- -
There is no such option: "Automatically update safe downloads list."

June 03 2011 at 2:27 PM Report abuse rate up rate down Reply
1 reply to mbabco@earthlink.net's comment
apple1loop

You need to have installed the latest security update that came out a few days ago via Software Update.

June 03 2011 at 8:14 PM Report abuse rate up rate down Reply
n9yty

From terminal (and thus you could do this via Apple Remote Desktop, AppleScript, whatever), you just need to run:

/usr/libexec/XProtectUpdater

June 03 2011 at 2:26 PM Report abuse rate up rate down Reply
mbabco@earthlink.net

After I copy the text into terminal it looks like this:

Macintosh:~ MB$ more /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist

When I hit return, I get the following message:

/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist: No such file or directory

I get the same thing with our without quotes. What am I doing wrong?

June 03 2011 at 2:12 PM Report abuse rate up rate down Reply
1 reply to mbabco@earthlink.net's comment
Brandon

Sounds like you need to run software update

June 03 2011 at 8:11 PM Report abuse rate up rate down Reply
tuawsteve

No, it works fine without quotes, dude.

more /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist

How do you think I got the screenshots for this post? Answer: I pasted that code into Terminal. Without quotes.

Have a nice day,

Steve

June 03 2011 at 12:46 PM Report abuse +3 rate up rate down Reply
richarde

eh, try without quotes...

more /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist

June 03 2011 at 12:39 PM Report abuse +2 rate up rate down Reply
robertrpoland

To bad Steven Sande is to busy to read his own posts.

The correct command to enter in Terminal is
"more /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist", with quotes.

June 03 2011 at 12:33 PM Report abuse -4 rate up rate down Reply
1 reply to robertrpoland's comment
Richard Servello

Ha, thanks for that, I was just about to post that it was truncated!

June 03 2011 at 12:46 PM Report abuse rate up rate down Reply
Buy an ad here

Tweets

© 2012 AOL Inc. All Rights Reserved.