All sigs have a number at the end. Unless it's the first with that name. -- Joel Esler iPhone
On Feb 17, 2016, at 6:08 AM, Mark Allan <markjal...@gmail.com<mailto:markjal...@gmail.com>> wrote: Hi all, I'm just wondering if there's an underlying reason for the recent rash of FP detections. From my own experience, with the exception of 3 signatures, all of the ones I've had to report and/or whitelist locally have a sig name ending in -xxx where xxx is a number. Are these numbered sigs generated automatically by some code somewhere rather than being hand-crafted? If so, would it be possible for the auto-generated sigs to go through a more stringent test phase before being released? Mark _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml