# RM PluginStoreKit ID'd as Malware **URL:** \ **Category:** RapidWeaver Classic\ **Created:** [August 20, 2020, 1:51am UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361 "2020-08-20T01:51:29Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![alarkin](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@alarkin](https://forums.realmacsoftware.com/u/alarkin)\ **Post date:** [August 20, 2020, 1:51am UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/1 "2020-08-20T01:51:29Z")
Hello: My Intego virus Barrier software has identified 4 RM PluginStoreKit files as malware. Does anyone have any idea whether this is legit? I can’t use RW because of it. ---
**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\ **Post date:** [August 20, 2020, 12:17pm UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/2 "2020-08-20T12:17:28Z")
My guess is that it’s the Virus thing you are using, but without more information on what files it **thinks** are malware it’s impossible to say for sure. ---
**Author:** ![alarkin](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@alarkin](https://forums.realmacsoftware.com/u/alarkin)\ **Post date:** [August 20, 2020, 4:27pm UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/3 "2020-08-20T16:27:18Z")
Hi Doug - Thanks for the reply. here’s the list (this is a screen capture) == all in a file called “A” which I have tracked down. Should I just delete the program and reinstall? This came out of nowhere. Best Adrienne ![Screen Shot 2020-08-20 at 9.26.02 AM.png](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/3X/b/b/bb64ab1cfbc4d582ff403d58ff05baf5b1a1a936.png) ---
**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\ **Post date:** [August 20, 2020, 4:46pm UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/4 "2020-08-20T16:46:37Z")
I’m not at my Mac right now and I’m not familiar with Intego virus Barrier. I don’t have a clue as to what they’re looking for. On The screenshot above I can’t read the path (smooshed) so I don’t know where it’s finding what it suspects to be malware. It doesn’t look like it’s in the applications folder so deleting and reinstalling probably won’t get rid of the message. Perhaps someone from RealMac @Aaron can have a look. ---
**Author:** ![alarkin](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@alarkin](https://forums.realmacsoftware.com/u/alarkin)\ **Post date:** [August 25, 2020, 10:29pm UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/5 "2020-08-25T22:29:29Z")
Hi Doug - does this help? All of the files track back to a file in the “Contents” of the RW package. ![Screen Shot 2020-08-25 at 3.25.29 PM.png](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/3X/e/d/edc725f15f1f7c6f7f9210e428fc36ac7cc98f28.png) ---
**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\ **Post date:** [August 26, 2020, 12:36pm UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/6 "2020-08-26T12:36:28Z")
You can try to reinstall RapidWeaver. It shouldn’t hurt anything. I don’t know the internals of the RapidWeaver package, but I do know that it does do things like checking for updates for it self and 3rd party plugins. My guess is that the “virus barrier” software is misinterpreted that as malware. You can find a new copy of RapidWeaver here, you’ll need to re-enter serial numbers . > **[RapidWeaver Release Notes](https://www.realmacsoftware.com/rapidweaver/releasenotes/)** > > RapidWeaver release notes, including links to download every version of RapidWeaver since 2004. ---
**Author:** ![alarkin](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@alarkin](https://forums.realmacsoftware.com/u/alarkin)\ **Post date:** [August 27, 2020, 1:06am UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/7 "2020-08-27T01:06:45Z")
Doug - when I downloaded RW 6, I got this message from Intego: malware in the file. I don’t know what to do. I use 6.4 because I have an older version of Mac OS for various reasons. ![Screen Shot 2020-08-26 at 6.04.53 PM.png](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/3X/7/4/742174eeb2f9e29251129079371afae0b8fdd50c.png) ---
**Author:** ![robbeattie](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/robbeattie/32/78_2.png) [@robbeattie](https://forums.realmacsoftware.com/u/robbeattie)\ **Post date:** [August 27, 2020, 5:52am UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/8 "2020-08-27T05:52:19Z")
Seems like this or something similar has come up before - [Malware warning](http://forums.realmacsoftware.com/t/malware-warning/16411) Maybe the way to handle it is outlined here? [https://support.intego.com/hc/en-us/articles/207114738-VirusBarrier-False-Positive-#:~:text=If%20you%20believe%20that%20VirusBarrier,Detection%20Team%20for%20further%20analysis.&text=NOTE%3A%20If%20a%20false%20positive,released%20to%20resolve%20the%20issue](https://support.intego.com/hc/en-us/articles/207114738-VirusBarrier-False-Positive-#:~:text=If%20you%20believe%20that%20VirusBarrier,Detection%20Team%20for%20further%20analysis.&text=NOTE%3A%20If%20a%20false%20positive,released%20to%20resolve%20the%20issue). ---
**Author:** ![Rovertek](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/rovertek/32/223_2.png) [@Rovertek](https://forums.realmacsoftware.com/u/Rovertek)\ **Post date:** [August 27, 2020, 9:48am UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/9 "2020-08-27T09:48:29Z")
The Intego support article that Rob just gave you the link to is the best way to find out what’s going on. A couple of weeks ago, I had a similar warning from VirusBarrier about an upgrade software (nothing to do with RapidWeaver) that I downloaded being a malware. I decided to quarantine that software and I contacted the developer. They had no idea why VirusBarrier flagged them as malware. But a week or so later, I got another update notification for the same software and this time, it did not get flagged as malware. Few days later, I did read an Intego blog post that may possibly explain those malware flags. Please, read [this post](https://www.intego.com/mac-security-blog/mac-malware-exposed-xcsset-an-advanced-new-threat/). ---
**Author:** ![alarkin](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@alarkin](https://forums.realmacsoftware.com/u/alarkin)\ **Post date:** [September 1, 2020, 8:50pm UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/10 "2020-09-01T20:50:34Z")
Thanks for your reply. Intego has duplicated the message and have sent to their malware team to see what’s going on. Progress! ---
**Author:** ![alarkin](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@alarkin](https://forums.realmacsoftware.com/u/alarkin)\ **Post date:** [September 5, 2020, 11:28pm UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/11 "2020-09-05T23:28:32Z")
Dear Rob, FYI, I just received the following message from Intego, confirming that these messages about RW 6.4 were false positives. Hello …, I have confirmed that this is a false positive and you can safely Trust the files which are being detected by VirusBarrier. We will be removing this detection with the next virus definitions update, which should be released within the next day. Intego Support Team ---
**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/system/32/25301_2.png) [@system](https://forums.realmacsoftware.com/u/system)\ **Post date:** [October 6, 2020, 9:28am UTC](https://forums.realmacsoftware.com/t/rm-pluginstorekit-idd-as-malware/34361/12 "2020-10-06T09:28:34Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.