> > These rules must have a common signature? Old downloads suddenly trigger > positives.
Hi Jari, These sigs need to be reported as FP's to: false_positive AT crdf.fr In the mean time, I've whitelisted on the mirrors, until they can take a look. One thing to double check is to submit one of the suspected files to virustotal, and confirm if it's definitely a fp. Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
