[clamav-users] FP with Osx.Trojan.EmPyre-6852410-0

[Al Varnell]

Not only that, it's the installer package for an update to the macOS Malware Removal Tool and only being detected by ClamAV here:
<https://www.virustotal.com/#/file/c81d0180cbfa858d6f3faf445514cbb53675d4f469beaa5638eb95a3a8d5d0f1/detection>.

Sent from my iPad

-Al-

> On Feb 13, 2019, at 14:40, Mark Allan <markjallan at gmail.com> wrote:
> 
> Hey folks,
> 
> Signature "Osx.Trojan.EmPyre-6852410-0" is generating an FP against a file signed and distributed by Apple.
> 
> File hash is c81d0180cbfa858d6f3faf445514cbb53675d4f469beaa5638eb95a3a8d5d0f1
> 
> Mark
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190213/85441e44/attachment.htm>