(deleted) in dylibs for all apps

[ElvisofDallas]

Is this normal? What does it mean that all the dylibs show (deleted) after the process/app name?

[utkonos]

I am seeing this as well with macOS 12.4. Could there have been a breaking change with Monterey?

[its-a-feature]

I believe this is due to the dyld_shared_cache introduced in Big Sur. Specifically, that deleted flag is being added because of this instantiation line https://github.com/objective-see/TaskExplorer/blob/c8f31d01b886ef889ae0687eb21203d46de563be/Items/Binary.m#L54.

I think an easy fix would be to check if the file exists as part of the shared cache if it doesn't exist on disk like this: https://github.com/its-a-feature/dylibHijackScanner/blob/main/dylibHijackScanner/parseFiles.m#L526-L527

I'd be happy to open a PR @objective-see

[Ashenaleng]

Hi, I’m a user and I have the same problem. Upon installing Taskexplorer in Ventura 13.0.1 my system crashed. Tons of files show as deleted in task explorer and I have absolutely no clue what it means?? There is no explanation to be found. Console is full of these error reports (like 100 of these): OBJECTIVE-SEE ERROR: could not get path for NSBundle </System/Library/Extensions/.... and these OBJECTIVE-SEE ERROR: failed to query VirusTotal ((null). I seriously suspect my system has been infected by a Fud Rat that is bypassing all virus scanners (Malwarebytes, Bit defender, F-secure) and no I’m not just paranoid someone has actually admitted to doing this to me (in person) but is unwilling to leave and my computer gets taken over. But I have no proof. I see tons of remote administrator processes running in Taskexplorer, however all my sharing permissions are off. I tried to find a user forum for Objective See apps but can’t find anything and am stuck! Please help a girl out, I am at wits end!

[urbanadventurer]

Is showing these deleted dylibs for each process a known bug? I have Macbook Pro with an intel CPU and Macos 13.2.1.