On 2/6/2017 12:23 μμ, Tilman Schmidt wrote: > A better approach would be to submit false negative and false positive > samples to ClamAV for inclusion in the next signature database update. Yes, it seems this is the best approach. Here is the ClamAV malware report page: https://www.clamav.net/reports/malware Nick