Third-party tool identifies Agent-BGP Trojan in macOS dyld shared cache file

Throw Norton in the trash. Never use it again.

The file it flagged is in the System folder. Nothing and no one other than Apple can so much as touch the contents of this encrypted volume.

False positive, and in (of all places), a Cryptex.

The built-in macOS anti-malware just prevented a corruption, too.

Remove Norton per vendor instructions, and enjoy the rest of your day.

Agreed! Delete Norton. False positives is how they attempt to justify that it is working for you and is the primary source of their revenue stream. Your Mac already has Malware protection called XProtect that performs 3 different types of scans on your computer at regular intervals.

Also a Google search gives this Gemini result:

• The file dyld_shared_cache_arm64e.01 is a core, cryptographically signed system file built into macOS, and any antivirus flag on it is a false positive.

While I agree "Norton" should be trashed, use caution not to merely drag its app icon to the Trash. Uninstall it in accordance with its uninstallation instructions, and hope that they actually work. For those instructions consult its documentation.

Removing earlier versions of that **** ranged from difficult to impossible, as in the only way to completely eradicate it was to erase the Mac.

Rule 1 of Macs is don't install junk.

trinko wrote:

Norton just told me that I have two instances of Agent-BGP which is labeled as a Trojan.

You don't.

Norton told me that it can't remove the file.

The file is located at /System/Volumes/Preboot/Cryptexes/Incoming/OS/System/Library/dyld/

dyld_shared_cache_arm64e.01

Thanks to Apple for preventing this kind of damage.

Agent BGP seems legit based on this AI summary "The term agent BGP MAC typically refers to the role of a Border Gateway Protocol (BGP) routing agent handling Layer 2 Media Access Control (MAC) address advertisements, most commonly seen in BGP EVPN (Ethernet VPN) architectures or specialized OVN BGP Agents in cloud networking. [1, 2]"

Gibberish.

Has Norton AI misidentified this file as containing a Trojan?

Oh yeah.