if a minority of AV detect a virus or something its usually false positive, if a majority of AV find something then that could be something.
