This almost always has to do with member signatures that are hosted on external websites. We also allow PHP generated signature images, and when they are hosted on flagged sites, a virus scanner will throw up an alert.
Remember that you can also choose to disable all signatures, it saves bandwidth, and pages load quicker when external content isn't loaded.
On any forum post, click the little x on the right, and you can either disable that persons signature, or all:
.
You can re-enable all signatures from the My Settings page: http://www.neowin.ne...ea=ignoredusers






