The Monitoring Client Malware Plugin for the Mac uses a list of known files, processes, and/or custom tests to determine if a machine may be running known-bad software. Alerts are sent when malware is detected, and a one-time warning is sent for detected ancillary files.
What Malware is Reported?
Watchman Monitoring maintains our own malware list of known files, processes, installers and other custom tests to determine if a computer is running or has known-bad software.
Watchman Monitoring no longer publishes the details of our Malware definitions.
This is in line with other AntiVirus vendors, and allows us to sort and categorize malware components faster.
Malware definitions are updated several times a month.
Malware Was Not Reported.
You can help improve our heuristics by submitting samples at our malware submission page. Details on files including paths you remove, along with any installers found in Downloads folders help us improve our malware detection.
Your submission will be directed to our helpdesk. Please include your email address in the notes, if you would like a follow up response.
Why am I receiving a Malware warning for a file or files?
Occasionally malware removal tools remove the active binary or application, but leave behind files, property lists and other miscellany. A one-time alert is sent regarding the left-behind files, until the file count increases.