update_dyld_shared_cache trying to access webcam

Question

update_dyld_shared_cache trying to access webcam

Why is this trying to access my webcam???

Posted on Apr 22, 2018 8:26 AM

Reply

Answer 1

Apr 22, 2018 8:36 AM in response to leroydouglas

Is it possible I have a root kit virus? I have been getting locked out of my account. And having to reboot from a USB. Ever since I did the reinstall with the USB it stopped locking me out and doing weird things, but this worries me. Also kapersky found 3 malicious objects yesterday in some network files. I can’t remember the names now and I deleted them right away. I’m just very worried and I have done everything possible to delete my system back to original settings and nothing seems to work. 1 other question, are there supposed to be files even if it’s a brandnew CLEAN install saying that they are from January and February? I had a bunch of those even some going back as far as 2014.

Reply

Answer 2

Apr 22, 2018 8:53 AM in response to abandonedmuse

abandonedmuse wrote:

Also kapersky found 3 malicious objects yesterday in some network files.

First I would uninstall the Kapersky AV using the uninstaller. This can cause all sorts of problems and false negatives.

I would not trust in on the Mac.

Reply

Answer 3

Apr 22, 2018 8:45 AM in response to leroydouglas

You all keep saying that but if not I would have never known what it was doing. Kapersky won best antivirus for Mac last year. I haven’t seen any false positives and it only found 3 malicious files. I just don’t think it’s safe anymore to not have an antivirus on a mac. You have no idea what i have been going through. I have been getting locked out. Etrecheck found a bunch of strange things on my machine but I never paid the $20 bucks to get them removed. I just did a full wipe. I just want to make sure whatever was in my computer is gone. About a month ago malware bytes found 3 viruses in my mac. So i had something there bc back in the day before I became a professor I ysed to download a cracked version of Adobe and Microsoft so no doubt I had somecrazy in my system that I let in. I thought even if i let something in it couldn’t do harm but I was very wrong. Is there any way to see a list of files I should have on a mac to compare?

Reply

Answer 4

Apr 22, 2018 8:58 AM in response to abandonedmuse

I want to also add that if I would restart all of a sudden I would have guests when I have guest access off. I would have people in my remote sharing when I had that off. I would turn it off and it would all come back the next time I would restart. The final thing it did which is when i decided to do a reinstall from a usb was that it locked me out completely. My password i had just made would not work and there was a guest group in the lock screen when I had specifically turned off guests. It was very scary. Thankfully i had everything I needed in the cloud. Right now everything has been normal and my machine isn’t running hot all the time but now this webcam thing...i am doing a safeboot though. Just to see.

Reply

Answer 5

etresoft

Level 8

46,614 points

Apr 22, 2018 12:21 PM in response to abandonedmuse

abandonedmuse wrote:

Kapersky won best antivirus for Mac last year.

I think you are just looking at an advertisement. There are many such sponsored stories. Every antivirus product wins best in show every year.

I just don’t think it’s safe anymore to not have an antivirus on a mac.

Macs already have antivirus. macOS includes multiple layers of malware protection. You don't need anything else.

Etrecheck found a bunch of strange things on my machine but I never paid the $20 bucks to get them removed.

If EtreCheck finds something unusual or something you don't understand, post your report here on Apple Support Communities and ask about it. That is what it is designed for.

EtreCheck will remove adware without having to pay any money. The only people who would have to pay are those that want to keep running it even when they don't have a problem. There are some features that are disabled in free mode because they could be dangerous. Primarily, those restrictions are to keep people out of hidden directories. If you want to have EtreCheck remove adware or some other potentially malicious software that runs in the background, it will do that without paying. It will also issue the launchd commands to unload the software properly so it can't resurrect itself. It is a delicate balance trying to give people who do pay a little something extra for their money while still preventing free users from accidentally doing damage to their systems.

I just did a full wipe.

That may not necessarily work. You would have to make sure to restore only user documents afterwards. If you do a full restore, you will restore whatever strange things were on the system before.

Is there any way to see a list of files I should have on a mac to compare?

There is, but perhaps I shouldn't mention it at this point. I probably wouldn't get a good response. 🙂

Reply

Answer 6

Apr 22, 2018 1:24 PM in response to etresoft

Hey apple no you didn’t contact me to find out why I said what i said. And also your not deleting his comments whih are ALSO SPECULATIVE. Obviously this guy has some pull in the forums and you are all just trying to keep his ridiculous “help” comments on because you know him. Yet he hasn’t helped. If you look at this comment he wrote that he WOULD help me but he wasn’t going to. Yeah. Great work deleting mine for calling him out but not his despite the fact he is patronizing me.

Reply

Answer 7

etresoft

Level 8

46,614 points

Apr 22, 2018 1:39 PM in response to abandonedmuse

I have not reported a single one of your responses. If anything, I've come very close to getting a few of my own removed. In that other thread, I did report a reply from the OP that included their full name and location.

These forums are meant for technical discussions. Anyone who attempts to steer a thread into conspiracy theories, rants, or personal attacks is likely to attract the attention of the moderators. They will do a good job of editing the discussion to make it look like we had a polite technical discussion. I'm sure they are watching us both pretty closely today.

If you don't want to use EtreCheck, that's fine with me. My only interest here is correcting misinformation about EtreCheck.

I don't know what is trying to access your webcam. I also don't know what software you have installed that is trying to frighten you about it. It certainly isn't doing a very good job of alerting you. "update_dyld_shared_cache" is roughly equivalent to saying "some software". If its only job is to frighten you, then I guess it is working as designed.

Your webcam has a bright green light that will alert you when it is on. If it turns on when you don't expect it to, I think it is better to identify what malicious software has made it past your antivirus and is now running in the background. Kaspersky is one of the better antivirus products, in spite of the political press they have recently been getting related to Russian spying. It is unlikely that you have any malware trying to access your webcam.

Reply

Answer 8

Apr 22, 2018 1:42 PM in response to abandonedmuse

abandonedmuse wrote:

And yes I am doing what you recommend. Hopefully that will work. Just waiting for the system to finish encrypting everything.

Yes, please report your success or failure. We can all learn from it.

Good computing abandonedmuse !

Reply

Answer 9

Apr 22, 2018 1:48 PM in response to leroydouglas

10-4!

Hopefully this is the last of this crazy 7 day mess. Oh I want to also add it says my app store is trying to open the webcam also. Honestly good luck to anyone trying to spy on my webcam. I have had duct tape on it for about 4 years or since Snowden told everyone the govt spys on you. That and the mic have a nice duct tape. Even if I take it off it’s blurry. But, it is freaky someone may be getting in to my darling MacBook Pro which I love with all my heart.

Reply

Answer 10

Apr 22, 2018 1:51 PM in response to tygb

Hmmm I’m gonna try the safe boot thing Leroy suggested and see what happens. Hopefully that will solve it. I’m not really keen on deinstalling any antivirus right now. Maybe in the future when I know all is clear. I have 30 days for free :)

Reply

Answer 11

May 28, 2018 3:09 PM in response to abandonedmuse

Just want to let everyone know that Apple confirmed it is malware. I took it to an Apple store yesterday. So if anyone has this issue you will need to try and take it out. If it is the same one, reinstalling does not work. Neither will your recovery partition. It hangs out in the mmotherboard and I believe the only way to get it out is flashing the efi back onto the chip but I haven’t been able to do this yet so I cannot confirm.

Reply