Trojan.JS.Agent.UYR in Safari Cache from Wikipedia site.

obitz wrote:

You're advising to uninstall my AV/VPN software?

Technically, we are suggesting using the built-in security, the built-in scanning, the built-in VPN (when connections into affiliated organizations is needed) and the built-in iCloud+ Private Relay privacy. This as the add-on stuff is too often indistinguishable from malware, or just noisy about nothing.

Add-on first-few-hops VPNs badly solve a problem that hasn’t existed for a decade, but badly solve it in a way that is perfect for personally-identified metadata collection.

It caught this trojan! I understand that this trojan is really a Windoze threat not a threat to a macOS system. But, the AV/VPN software is NOT the problem, the problem is malicious websites... so, I guess that I should wear blacked out glasses also, so that I can drive blind!!

Assuming malware was actually found here. I’m skeptical. False positives are unfortunately quite common.

Folks can go to great effort to corrupt macOS trying to “fix” false positives too, given the built-in macOS anti-malware will block efforts to corrupt macOS itself.

What was purportedly found here has no bearing on macOS.

Assuming this detection or mis-detection is for Windows malware, it is completely unnecessary noise on macOS, and noise tends to be great fodder for self aggrandizement; for product self-advertising. Which happens a lot.

How folks do get adware and malware and other rubbish on macOS is by seeking out and installing it. Which tends not to be apps that get picked up in scans, often with the user having overridden Gatekeeper and other defenses and installed the app. As for add-on security apps, I’d consider Avast anti-malware to itself be difficult to distinguish from malware, if not actually malware. This given the vendor’s history of selling personally-identified metadata. Other forms of what can too often be malware are cracked apps, and license key crack tools.

Your request for assistance here with whatever this report is (or is not) is misdirected. For assistance with add-on apps, contact the app vendor. You paid them—quite possibly paying them more with your metadata than you might realize—so avail yourself of whatever support they provide for what they suggest doing here. Which will probably be clearing the cache at most, or quite possibly nothing. Further, these malware names are usually vendor-specific, and this vendor has chosen not to document what this particular finding might be, or might not be.

This thread is an example of the cognitive overhead involved with add-on anti-malware. Apps which may or may not have found something here and which then and seemingly unnecessarily reported what was found, reports which then get misdirected away from the vendor that provided the app, and which in aggregate is a great huge pile of work for other folks over, well, nothing.

obitz wrote:

You're advising to uninstall my AV/VPN software? It caught this trojan! I understand that this trojan is really a Windoze threat not a threat to a macOS system. But, the AV/VPN software is NOT the problem, the problem is malicious websites... so, I guess that I should wear blacked out glasses also, so that I can drive blind!!

Your Mac already has built-in security features. You don't need to add dubious third-party software from companies whose entire goal is to make money. Of course their software will find things. Otherwise, you wouldn't believe you needed it. Apple, on the other hand, doesn't charge extra for the service.

Start here:

Effective defenses against malware and ot… - Apple Community

Or you can continue to believe internet scaremongering and keep giving your money to companies that may well be selling your personal data.

Don't use VPN services.

obitz wrote:

Trojan.JS.Agent.UYR was found in three (3) instances attempting to run on my MBP23 from the safari cache directory. My AV/Malware SW deleted promptly, but what does this trojan do?!

TIA

Your issue is with the third-party app involved here, and not with something anybody around here can assist with.

For questions or concerns arising from your use of the third-party anti-malware app, contact the app vendor.

They may want to know what is installed on this Mac, and from whence it came, too.

This given one use of the Jolly Roger 🏴‍☠️ can involve cracked apps and torrents, which can host malware.

Or as stated above, you can remove the third-party anti-malware app.

Uninstall your AV/Malware SW. Rule 1 of Macs is don't install junk.