Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-16 Thread Al Varnell
And during the time we've all been talking about this, evasi0n has been revised several times and is now at v1.3 since Monday, Feb 11, so even if the more accurate signature was active, it would not catch any of the more recent releases: evasi0n-mac-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-rel

Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-16 Thread Al Varnell
For some reason MS Entourage wasn't able to properly format Jim's message. I was about to respond with the same question, except that I have looked it up. Osx.Exploit.Iosjailbreak-1 does appear in and I can locate it in daily.cvd, but it appears

Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-16 Thread Joel Esler
We dropped the original signature, and have replaced it with a much more accurate one. -- Joel Esler Sent from my iPhone  On Feb 16, 2013, at 1:48 PM, Jim Preston wrote: > Note: I have combined too messages for clarity > > On 02/14/2013 09:50 AM, Joel Esler wrote: >> In any case. This sig

Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-16 Thread Jim Preston
Note: I have combined too messages for clarity On 02/14/2013 09:50 AM, Joel Esler wrote: In any case. This signature was dropped a couple days ago, and beyond that, users can ignore it on their end. -- Joel Esler Senior Research Engineer, VRT Open Source Community Manager On 02/16/2013 05:

Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-16 Thread Joel Esler
Thanks to you all for your input on this matter. I don't think we need to continue this thread any further. The signature is in place. If users want to remove the jailbreak from quarantine or whitelist the signature, they are more than welcome to do so. We apologize if this has caused any

Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-16 Thread Peter Bonivart
On Sat, Feb 16, 2013 at 1:29 AM, Tilman Schmidt wrote: > Am 14.02.2013 14:17, schrieb Daniel McDonald: >> But for the majority of us, It's not just potentially unwanted, it is simply >> unwanted. If I had wanted an open phone, I would have bought an Android. > > That does of course heavily depend