Infected file: dyld_shared_cache_arm64e

Hello,


I ran my antivirus program and it detected the file dyld_shared_cache_arm64e and identified it as an infected file with the threat name: ELF:MiraiDownloader-O. It's a protected file and can't be quarantined by the antivirus software, nor can I delete it even by unlocking the file through the Information window or turning off FileVault.


I erased all content and settings but the antivirus program detected it again. Just upgraded to the latest version of macOS Ventura and found that I can't completely erase the SSD as this seems to be the only solution to removing the infected file. It seems the latest OS doesn't allow you to erase the SSD.


Any help would be appreciated.


Thanks.

Mac mini, 10.13

Posted on Nov 12, 2022 2:00 PM

Reply
Question marked as Top-ranking reply

Posted on Nov 12, 2022 2:38 PM

es1899 wrote:

Hello,

I ran my antivirus program and it detected the file dyld_shared_cache_arm64e and identified it as an infected file with the threat name: ELF:MiraiDownloader-O. It's a protected file and can't be quarantined by the antivirus software, nor can I delete it even by unlocking the file through the Information window or turning off FileVault.

I erased all content and settings but the antivirus program detected it again. Just upgraded to the latest version of macOS Ventura and found that I can't completely erase the SSD as this seems to be the only solution to removing the infected file. It seems the latest OS doesn't allow you to erase the SSD.

Any help would be appreciated.


Very likely a false positive.


Remove the anti-malware app (possibly Avast?) and revert to the built-in anti-malware tooling.


It would appear the add-on anti-malware app is erroneously detecting malware.


macOS is preventing you from blowing away a system-critical and heavily-protected file, too.


Or contact the anti-malware app vendor and request their support.

Similar questions

18 replies

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Infected file: dyld_shared_cache_arm64e

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.