I think your answer is pretty good. It’s clearly not every clean file in the world.
But clean files are added to the FP test all the time. -- Joel Esler Manager, Talos Group On Mar 8, 2016, at 5:55 AM, Al Varnell <alvarn...@mac.com<mailto:alvarn...@mac.com>> wrote: From previous communications here, I know they do run all new signatures through a standard QA process that includes running them against the database of proven false positives that they maintain. I’ve also read that this database does not include every file from every known OS and commercial application in the world, so I would have to guess it’s only what has been submitted to them and proven to be a genuine file. I’m sure Joel or Alain can give you a more complete answer when they get in. -Al- On Tue, Mar 08, 2016 at 01:56 AM, Groach wrote: I also would like to hear the response to this. What measures were taken to prove/disprove impact on existing genuine files before releasing to market? On 08/03/2016 09:49, Tsutomu Oyamada wrote: Hello, We believe you do some test against a new pattern file for ClamAV, by which you can find if the new pattern file shall work properly and efectively in the existing systems without any problem, before you release any new pattern file into market. Could you give us what type and/or which level of tests you make ? ---- Tsutomu Oyamada _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml