All sigs have a number at the end.  Unless it's the first with that name.

--
Joel Esler
iPhone

On Feb 17, 2016, at 6:08 AM, Mark Allan 
<markjal...@gmail.com<mailto:markjal...@gmail.com>> wrote:

Hi all,

I'm just wondering if there's an underlying reason for the recent rash of FP 
detections. From my own experience, with the exception of 3 signatures, all of 
the ones I've had to report and/or whitelist locally have a sig name ending in 
-xxx where xxx is a number.

Are these numbered sigs generated automatically by some code somewhere rather 
than being hand-crafted?

If so, would it be possible for the auto-generated sigs to go through a more 
stringent test phase before being released?

Mark

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to