Some malware doesn't even touch the file system nowadays - software like little snitch and tripwires are easily circumvented. All it takes is some remote code execution and you're fucked, so the best strategy is compartmentalization and extreme caution as to what code you execute. Only run signed apps from the AppStore and remove flash, pdf, and Java from the browser. The most critical thing is never running anything that didn't come from the AppStore and trusted vendors, and keeping OSX up-to-date.
Comments
Some malware doesn't even touch the file system nowadays - software like little snitch and tripwires are easily circumvented. All it takes is some remote code execution and you're fucked, so the best strategy is compartmentalization and extreme caution as to what code you execute. Only run signed apps from the AppStore and remove flash, pdf, and Java from the browser. The most critical thing is never running anything that didn't come from the AppStore and trusted vendors, and keeping OSX up-to-date.