Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Is it worth to buy an anti-virus software for Mac OS X?

I heard both opinions like "it's not possible to get a virus on Mac OS X" and "Mac OS X is also vulnerable against virus... "

Which is true? What is the accepted practice, if any? Under what circumstances would anti-virus be advisable?

share|improve this question

10 Answers 10

up vote 36 down vote accepted

There is anti-virus software available for Mac OS X:

Is it worth it? That's largely up to you. Personally I'd say unless required there's no reason to so long as you practice "safe computing" (eg. not opening files from just anywhere, being aware of what is installed on your computer, etc.). However there are some companies that require any computer (regardless of OS) to have up to date anti-virus software installed and operational.

There are no viruses available for Mac OS X but there are several pieces of malware and trojan horses that a user must manually download and install. The anti-virus products (and actually a feature in Mac OS X Snow Leopard) will help fight against these threats but the primary defence is actually user education as the attack vector is primarily social engineering and not using any security hole.

share|improve this answer
    
Virusbarrier is really good. –  datagutt Aug 18 '10 at 12:50
    
@datagutt: How good is it at detecting Windows viruses? Sometimes I get infected documents from Windows users, and I really hate passing them on to others. –  intlect Aug 21 '10 at 17:25
2  
Sophos has recently released free Mac AV for personal use. –  Joe Nov 8 '10 at 12:11
3  
While I don't use one, I can see that having a virus scanner on your mac would at least ensure you don't accidentally pass infected documents on to friends/family/coworkers who might run Windows without a virus scanner :o –  drfrogsplat Nov 10 '10 at 8:50
1  
@Buscar웃: You could say that for VirusBarrier too. The support page says to delete the X6 folder in /Applications but that just leaves processes that constantly run. Annoying. –  0942v8653 Jul 12 at 1:48

Probably goes without saying, but if you run any version of Windows in a VM within OS X, those installs of Windows will need antivirus software on them. A surprising number of people I've worked with (including, on one occasion, a head of IT) haven't thought of that.

share|improve this answer
2  
I would beg to differ since it's so easy to take and restore snapshots of a clean state of windows right after installation within a VM. that's why i never run anti virus on it, i just restore a snap shot when i need lol –  XAleXOwnZX Oct 15 '11 at 4:12
1  
Why would you bother eating healthy when you can just take medicine after you get sick? An ounce of prevention beats a pound of cure, etc. –  Scottie Oct 18 '11 at 14:08
1  
interesting quote but in this situation, i'd much prefer the 30 seconds snapshot load time then constantly having on-access anti-virus scanning occur –  XAleXOwnZX Oct 19 '11 at 4:04
1  
@XAleXOwnZX So you don't save any documents on your Windows VM or want to keep any settings you may have set in Explorer or a program? There's no static state in your Windows install at all? –  CajunLuke Apr 5 '12 at 22:36
3  
Viruses are not always visible. Your VM could become infected and continue to infect others on the network (or be used in an attack) without your knowledge for quite a long time. Even if (as @CajunLuke asks) you start from snapshot every time, you are still "unprotected" the entire time you are using the VM, and after infection a virus only needs seconds to destroy local files and/or attack/spread to other machines. –  studgeek Feb 20 '13 at 15:33

No, it's not worth it to buy any antivirus software for your Mac. This is for two reasons. Firstly, the number of viruses in the wold for OS X is infinitesimal. Your risk is extremely low, and what viruses do exist, are mostly proofs of concept or MS Office Macro Viruses targeting old versions of Office.

The second reason is because for what antivirus needs you do have, ClamXAV is lightweight, effective, and free. So no, it's not worth purchasing. But it is absolutely worth using, and if you can spare a few bucks for the tip jar, I'd encourage you to do that as well.

share|improve this answer
    
+1 Use vs. buy - that's a very good point. –  Sherm Pendley Apr 19 '11 at 22:02

The simple fact is that malware has always existed for Mac OS, so the statement that a Mac can't get malware is patently, demonstrably and dangerously false.

However, for many years; the scarcity of viruses, trojans and other malware that spread widely or affect a broad cross-section of Mac users has contributed to a perceived complacency about good security hygiene. The good news, is macs have a built in multi-layered defense system against virus and trojan/malevolent software. This means that most of the recent exploits rely on people unintentionally sabotaging themselves by self-defeating built in defenses. With a small investment of time, you can significantly decrease the need for additional anti-virus protection on OS X.

The calculus of whether running a specific antivirus package is a moving target (vendors typically react to bugs and threats - so what was true yesterday may not be true tomorrow). This makes general answers about the merits of software easily out-dated in a month's time (let alone the two and a half years that have passed since this question was first asked).

What hasn't changed for decades, is that each user should at least spend some time thinking about what is on their device and how painful total compromise might be to them. Based on how valuable your time is to you, it would be silly for someone that has paid IT staff to advise them to not spend $1,000 extra dollars on evaluating security to include potentially installing anti-virus software. It would also be silly for a casual home user to pay for software rather than invest some time to mitigate known risks in their behavior in response to a healthy fear of the unknown.

There are many cases where additional anti-virus protection is critically important. There are also many cases where it is totally un-needed. I would recommend anyone browse these few Apple knowledge base articles to gauge their "baseline security aptitude" and then reach out and learn more before spending any money on anti-virus software1.

My only critique of the above articles would be the admonishment to frequently change passwords. This is of limited value when you start making unique passwords and don't as a matter of course enter those passwords on other computers. Changing passwords is of little use when your using them on compromised computers, since the new password is stolen as easily as the old one was.

Once you've mastered the basics, you should have absorbed the following ideas:

  • how to use the OS X keychain for storing passwords
  • considered or implemented having a few distinct passwords
  • and have started securing your account passwords as well as your computer (by applying the tips on Securing Apple ID to other accounts)

After the basics, now it's time to think about increasing your overall security by spending money on anti-virus or a good unique password generation toolset2 to automate secure storage of stronger, unique passwords.

Without being proficient at the level of involvement in the linked articles above, spending money and potentially adding instability or slowness from anti-virus software might not make sense for many users. Furthermore, Apple is clearly intent on getting ahead of this problem with the one-two punch of the App Store model where spreading unsafe software installation practices is clearly working with GateKeeper to allow most people to have automated warnings when code is not signed to prevent tampering and assist in tracing the source of malware.

For most Mac users on Lion, the correct answer is to keep running anti-virus if you have it but not to run out and get it unless you have a good reason to spend time and money after getting up to speed on the basics of security.


1 especially with the likes of Mac Defender preying on people looking for legitimate anti-virus software

2 like 1Password

share|improve this answer

There is a nice article on Mac.Appstrom from yesterday about antivirus on Mac OS X (which ones and do we need them).

share|improve this answer

Another possible reason install an antivirus software on a mac could be the protection of systems running other operation systems in a heterogenous network. A virus or malware could reside on a mac drive for several time, until it is activated by an other system, on which it can run.

Therefore it may make sense to install anti-virus software on all computers in a network, to keep the whole network clean.

share|improve this answer

I personally use Sophos. The company I work for uses Sophos with 20,000+ computers, and the Mac version is free for consumer use. I have not had any problems with it running on my machines. It scans relatively quickly, and runs faster & better than any Norton product I've ever used.

share|improve this answer

Arriving lately after the legitimate rising of this question I'd like to add here a return on many years and many OSes regular attacks.

  1. There is no Tchernobyl frontier (in 1986, French government announced publicly that the Tchernobyl radioactiv cloud wouldn't cross the country frontiers. Since this official public lie, I name with this metaphor any form of false official security barrier) to protect MacOS X: we live under the same probability
    (all operating systems are born equal with approximately the same coding errors ratio:
    they are written by us humans who are error prone).

  2. There are many attacks targeting specifically Norton AntiVirus for 2 reasons (I'm refering here to the volume of external attacks I see on our external firewall targeting 2967/tcp and 38293/udp = ports used to communicate with the Symantec control server these ports have to be explicitly closed when outside of the home network where is the real Symantec control server):

    (too many security defaults) × (too many people using it) = good target for cybercriminals

    (many versions of Norton AntiVirus failed to install or run on a case sensitive filesystem which is the sign of a weak quality control).

  3. Many attacks are targeting directly us (the human seated behind the keyboard), either through booby trapped web servers or HTML formatted E-mail hidding URL toward these booby trapped web servers

The 2 best anti-viruses I'm using on many versions of MacOS X are:

As their name lets guess it, they are based on the same engine. It is pretty good quality software, updated very quickly, and running also on many other Unixes. On some new crapware detected clamav included them within less than 72 h where commercial products took a quiet week (just enough time stop to get many thousand computers infested).

I also appreciate Sophos, because it is running on different OSes, does install and run on a case sensitive filesystem (which is the sign of a serious quality control).

share|improve this answer
    
Could you elaborate on what point 1 means. I have no clue what you are saying. Might you be able to source the point 2 to some data or tighten up the wording? –  bmike Mar 13 at 19:54
    
Thank you. I'll try to :). –  daniel Azuelos Mar 15 at 14:23

Apple is excellent and keeping up with patching the few Mac vulnerabilities that do arise, so anti-virus isn't necessary as long as your not foolish enough to fall for blatant trojans.

HOWEVER if you have a Windows PC with which you share files, it may be worth running anti-virus on your mac to prevent yourself from unintentionally spreading Windows viruses (which are otherwise harmless to Macs).

Note that all anti virus programs for mac are either a hoax or simply check for Windows viruses to prevent unintentional spreading of viruses while file sharing.

share|improve this answer

Viruses are so 80s. The big money is user information, this is where big companies make a lot of money , like google ads. Also Known As , Spyware.

Viruses started as a joke , a prank, a way for coders to have fun. Viruses flourished on Microsoft platforms like DOS and Windows because Microsoft never really cared about its customers other than how to sell more and make more money.

MacOS is a unix , unlike Windows a file cannot do whatever it wants, if it tries to modify your hard disk in any way outside the home folder it needs permissions.Permission you give. That makes life of a virus seriously hard. Because the goal of a virus is not just to infect your files, that means nothing , its there to infect your system to infect your OS. To take control of your OS. Thats the end goal.

Its not impossible to hack an OS like MacOS , but Apple is not stupid and unlike Microsoft it cares because safety and reliability is what it sells.

I have owned an iMac for 7 years, never had the problems I had with Windows. I see little reason to install a piece of software that will slow down my CPU and offer me zero benefits.

There is no such thing as safety, safety is an illusion. As a matter of fact I have caught viruses on Windows several times using an anti-viruses that was full updated.

If you want real safety , disconnect from the internet and install nothing. This is the only way to be sure.

What seriously annoys me and one of the big reasons I left Windows for good was that Microsoft created this culture of "getting a virus is what happens for an OS" like its something normal. Its not normal its a seriously flaw in the design of the OS , a flaw that survives because customers tolerate it as "normal".

Do not install anti-viruses, you paid for your OS, demand from its publisher to deliver an OS that does what is reasonable to expect to keep you and your files safe. Viruses and malaware are unacceptable.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.