Hi all, I've just reported this as an FP via the web form, but just so others are aware, ClamAV defs update 22376 detects a false positive for the 'sftp' binary that ships with macOS 10.12 Malware name: Win.Trojan.Agent-1771607 MD5 (/usr/bin/sftp) = 4eebcd77c25b8a5eb13de0ec6d8fb9d5 Best regards Mark