On 26/2/2013 11:49 πμ, Cedric Knight wrote:
What's your value of $sa_kill_level_deflt ?
$sa_kill_level_deflt = 8.31; You are right, this is the cause; I should have seen it.I might raise scoring for some SaneSecurity "high risk" signatures, which in practice don't seem to be causing false positives (like, in this case: AV:Doppelstern.Scam4.4628.UNOFFICIAL=5).
Thanks, Nick
