[clamav-users] Recent rash of FPs

[Mark Allan]

Hi all,

I'm just wondering if there's an underlying reason for the recent rash of FP detections. From my own experience, with the exception of 3 signatures, all of the ones I've had to report and/or whitelist locally have a sig name ending in -xxx where xxx is a number.

Are these numbered sigs generated automatically by some code somewhere rather than being hand-crafted?

If so, would it be possible for the auto-generated sigs to go through a more stringent test phase before being released?

Mark