Infected file (or not)?

Intego Virusbarrier (free version of Apple Store) has identified a file as an infected file

XProtectRemediatorGenieo

located in MacintoshHD/Library/Apple/System/Library/CoreServices/XProtect/Contents/MacOS/XProtectRemediatorGenieo


I can see the file (by looking at the contents of the XProtect contents) and it says it was created on the same date as all the other files in the XProtect files (a week ago).


Is anybody able to offer any advice any whether or not this is actually an infected file or a detection error.


I am suspicious of the infection report (and now inclined to remove Intego) but would welcome any input.


iMac Ventura 13.4


iMac 24″

Posted on Jun 23, 2023 07:19 AM

Reply
Question marked as Top-ranking reply

Posted on Jun 23, 2023 07:37 AM

You are right on track by being suspicious of the infection report and removing VirusBarrier is the correct answer. There is no need to install any Anti-Virus on your Mac and doing see will only cause problems like you are experiencing along with heavy usage of your Mac resources slowing your machine down.


XProtect is Apples tool to combat viruses (malware or trojans) and is updated frequently. That is all you need.

5 replies
Question marked as Top-ranking reply

Jun 23, 2023 07:37 AM in response to Ian Barlow

You are right on track by being suspicious of the infection report and removing VirusBarrier is the correct answer. There is no need to install any Anti-Virus on your Mac and doing see will only cause problems like you are experiencing along with heavy usage of your Mac resources slowing your machine down.


XProtect is Apples tool to combat viruses (malware or trojans) and is updated frequently. That is all you need.

Jun 23, 2023 08:10 AM in response to Mac Jim ID

Thank you both for your rapid replies, both very helpful.


From looking at the file local, the folder structure and the file dating I had inferred that the file flagged was part of the Apple protection. Very grateful to have that confirmed.


(I have made a big jump from High Sierra to Ventura with a new iMac and I hadn't known about the measures now built into the OS - have done a more a reading now.)


Thanks again.

Jun 23, 2023 08:22 AM in response to Ian Barlow

No Problem. Another thing to be aware of is allowing Notifications from a website while using Safari. Some sites will provide a fake notification saying your device is infected if you have allowed the Notification. You can check what sites that have allowed Notifications by going to Safari > Settings > Websites > Notifications. In my opinion, it is best to have very few, if any, sites allowed to provide Notifications.


While you are at it, you can also check for Pop-Up window by going to Safari > Settings > Websites > Pop-Up Windows.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Infected file (or not)?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.