[clamav-users] Recent rash of FPs

[Joel Esler (jesler)]

All sigs have a number at the end.  Unless it's the first with that name.

--
Joel Esler
iPhone

On Feb 17, 2016, at 6:08 AM, Mark Allan <markjallan at gmail.com<mailto:markjallan at gmail.com>> wrote:

Hi all,

I'm just wondering if there's an underlying reason for the recent rash of FP detections. From my own experience, with the exception of 3 signatures, all of the ones I've had to report and/or whitelist locally have a sig name ending in -xxx where xxx is a number.

Are these numbered sigs generated automatically by some code somewhere rather than being hand-crafted?

If so, would it be possible for the auto-generated sigs to go through a more stringent test phase before being released?

Mark

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml