avast 15.7.1 On macOS updated to 12.6.7

[Gary326]

I updated my Mac to Monterey 12.6.7. I seem to get false adware when I run the newest avast 15.7.1. I'm not sure about the false readings because they are in MacOs:AdAgent-Ec [ADW]. Safari and Ghostery have updated also. On a full scan this always comes up and cannot be quarantined nor deleted. I'm at a loss, so I do nothing. Avast updated itself to 15.7.1 and I believe these files must be on the Mac for it to run properly. Any help?

[ondrej.kolacek]

Hello,
false positives can be reported via https://www.avast.com/false-positive-file-form.php#mac
Kind regards,
Ondrej Kolacek

[Gary326]

I tried to find these file to send but cannot find them. system/ library/dyld/_shared_cache_arm64e, also in system/library/dyld/shared_cache_arm64e_x86_64h, the same with x86_64. Next step??

[ZD]

Having the same issue with these being identified as unsecured threats that cannot be resolved on MacOS 12.6.7 deep scan.
Threats:
MacOS:AdAgent-EC [Adw]
-system/ library/dyld/_shared_cache_arm64e,
-system/library/dyld/shared_cache_arm64e_x86_64h
-system/library/dyld/shared_cache_arm64e_x86_64

Cannot attached to submit for false positives. Requesting clarity from Avast admin. on next steps.

[Gary326]

Thanks, I will wait for instructions. BTW avast updated to 15.7.2 this morning. Ran the deep scan and still have the same issue. BTW. will avast run on MAC OS 13.4.1 update?

[ondrej.kolacek]

Hello,

It seems that Avast has detected malware in /System/Library/dyld/dyld_shared_cache.
This file is created by the macOS. It is a collection of libraries required by various applications on your mac. It is created to improve the boot-time of your mac as well as the time needed by apps to start when you want to use them.

Avast can't remove this file as it is protected by the operating system. If you want to read something about it, here is a short article: https://www.manpagez.com/man/1/update_dyld_shared_cache

You can ask the OS to re-generate that file by running the following command in Terminal.app:

sudo update_dyld_shared_cache -force

and then reboot your device. If this does not help, please run a Deep Scan to try to find the Application that contains the malware. If you then remove the application and re-generate the cache once more, it should solve your problem.

Kind regards,
Ondrej Kolacek

[rkruse]

I also have this issue. I tried running the command in terminal and it said that this tool is deprecated. So is this a false positive or actual malware infection?

[dread_n0t]

I am having the same problem. I'm hoping that it's a false positive?

Threat Name: MacOS: AdAgent-EC [adw]
Same MacOS
Same 3 cache files

MacOS:AdAgent-EC [Adw]
-system/ library/dyld/_shared_cache_arm64e,
-system/library/dyld/shared_cache_arm64e_x86_64h
-system/library/dyld/shared_cache_arm64e_x86_64

I'm also getting some other files for Firefox files
Script: SNH-gen [Trj]

[ondrej.kolacek]

EDIT: we apologise for the inconvenience, it was a false positive, by tomorrow at most it should be fixed.
Kind regards,
Ondrej Kolacek

[Gary326]

updated my avast this morning July 7th. ran a full scan twice. avast no longer finds the issue stated in my first post. thank you for the update.