You know how this ends, right? " Knock Knock !" Followed by, " Who's there? " And then " something something " and a punchline. When it comes to Mac malware, how do we know if it is installed or not?
It's not like malware wants to answer a Siri question, right? Access KnockKnock, a Mac utility that checks your Mac every time it starts scanning and detecting persistent malicious software that may not be detected by other tools or antivirus apps.
Scan Me, Baby!
How this nifty tool works is quite okay. When you start your Mac, KnockKnock also boots up, and when it finds certain file types, it asks for a virus and malware site to find information about what it thinks is malware.
It doesn't get much easier than this. Click to start the first scan.
Most malware will be persistent and run every time your Mac is booted. KnockKnock looks for persistently installed applications that often reveal malicious software.
The app itself is simple and straightforward. Double-click to open, click the Start Scan button. What you see in the left sidebar are apps or tools or core extensions that are constantly being installed. Signed Apple binary filters are automatically filtered out, but it shows legitimate third-party software.
Click on an item to reveal details and description. Here's how the developer explains what's going on:
If the item is an executable binary, KnockKnock automatically asks VirusTotal with a hash of the binary to retrieve information. While asking VirusTotal, this button displays '■ ■ ■'. When the query is completed, the button title is automatically updated with either the detection ratio, or a & # 39;? & # 39; if the binary is not known for VirusTotal.
From there, more detail is available, including the VirusTotal information about a suspicious file. KnockKnock will find many files even though Apple's own files are filtered, but the app does not try to determine if a discovery is malicious software or not, but if a file is known malware from VirusTotal lists, it will be detected and highlighted in red.
After that, well, it's all pretty geeky, but KnockKnock will look for persistently installed items that a standard virus scanner app might not find. Not bad for free, right? But you have to get your fist.