Tidy My Mac
가이드 · 2026년 11월 3일 업데이트
XProtect: the Mac's built-in antivirus, and how to check your Mac for malware
Every Mac has an antivirus called XProtect, but it has no window and no scan button. Here is what it does on its own, how to make sure it is up to date, and how to check a Mac for malware yourself or run a virus scan when you want one.
macOS 26 Tahoe 이상 · 신용카드 불필요 · 모든 작업은 사용자의 Mac에서 실행
The short answer: XProtect is always on and you can't start a scan with it. Make sure it gets updates: in System Settings › General › Software Update, click the info button next to Automatic Updates and turn on Install Security Responses and system files. To check your Mac yourself, look for apps, login items, profiles and browser extensions you don't recognise. For an actual virus scan, you need a separate scanner.
What XProtect does
XProtect is part of macOS and can't be installed, opened or turned off from System Settings. It has two parts:
- XProtect checks an app against Apple's list of known malware when you first open it, when the app changes, and when the list is updated. If it matches, macOS says the app will damage your computer and offers to move it to the Trash.
- XProtect Remediator runs in the background several times a day, looks for known malware families that are already on the Mac, and removes them. It tells you nothing unless it needs you.
Together with Gatekeeper, which blocks apps that aren't signed and notarized, it stops most well-known Mac malware. What it doesn't do: scan a file or folder on request, recognise malware Apple hasn't seen yet, or block phishing sites outside Safari. See do Macs need antivirus? for who needs more.
How to make sure XProtect is up to date
Apple updates XProtect's list of malware separately from macOS, often several times a month. Those updates only arrive if this setting is on:
- Open System Settings › General › Software Update.
- Click the info button (ⓘ) next to Automatic Updates.
- Turn on Install Security Responses and system files and click Done.
To see when XProtect was last updated, run system_profiler SPInstallHistoryDataType | grep -A 4 XProtect in Terminal. Each entry shows a version and an install date; the newest should be from the last few weeks.
How to check a Mac for malware yourself
Malware has to start somewhere and keep itself running, so it leaves traces in a few places. Go through them in this order:
- Applications: open the Applications folder, sort by Date Added, and look for apps you don't remember installing, especially around the time the problems started.
- Login items: open System Settings › General › Login Items & Extensions and look at both the apps that open at login and the background items.
- Launch agents: in the Finder, choose Go › Go to Folder and open
~/Library/LaunchAgents,/Library/LaunchAgentsand/Library/LaunchDaemonsin turn. Each file is named after the developer of an app you use, such ascom.google.keystone.agent.plist; one with a random name, or one pointing to a hidden folder, deserves a closer look. - Profiles: open System Settings › General › Device Management. On a Mac that no workplace or school manages, it should be empty.
- Privacy permissions: in System Settings › Privacy & Security, check Accessibility, Full Disk Access and Screen & System Audio Recording for apps that have no reason to be there.
- Browsers: remove extensions you didn't add, and check the search engine and home page. See how to remove a browser hijacker.
- Activity Monitor: sort by % CPU and look for a process you don't recognise that stays busy while the Mac is idle. See how to read Activity Monitor.
If you find something, follow how to remove malware from a Mac. If you are worried someone has access to your Mac rather than malware, see has my Mac been hacked?
How to run a virus scan on a Mac
macOS has no scan you can start, so a virus scan needs an app:
- A free on-demand scanner, such as the free version of Malwarebytes, scans the Mac when you ask and removes what it finds. It doesn't protect you between scans.
- A full antivirus also scans new downloads as they arrive, which is when most infections can still be stopped.
- To check a single file, you can upload it to VirusTotal, which runs it past dozens of antivirus engines. Uploaded files are shared with security companies, so never upload private documents.
Download any scanner only from its developer's own site or the App Store. Fake “virus scan” pages and apps that always find dozens of threats are a common scam in their own right.
Tidy My Mac으로 Mac 확인하기
- Antivirus runs a Quick, Normal or Deep scan whenever you want one, and scans new files in Downloads and on the Desktop as they arrive. What it finds goes to a quarantine you can review.
- Security Settings checks that XProtect, Gatekeeper, System Integrity Protection and automatic security updates are on, and scores your Mac out of 100.
- Startup Items lists every login item, launch agent and daemon with the app it belongs to, so the places malware hides are on one screen.
XProtect and malware checks에 관한 질문
Yes, XProtect. It checks apps against Apple's list of known malware and removes known malware in the background. It has no window or scan button, and works only as long as security updates are installed.
You can't, in any supported way. XProtect runs by itself when apps open and on a schedule. To scan the Mac on demand, use a separate scanner.
Common signs are a browser that keeps changing its search engine or showing ads, apps or login items you didn't install, a Mac that stays busy when idle, and accounts that were signed into from elsewhere. Check the places in this guide, then run a scan.
Not from System Settings, and you shouldn't try. Turning off security updates stops XProtect learning about new malware, which leaves it checking against an old list.