Is it a deepscreen notification or a suspicious alert? Also in the FS, what are your heuristics sensitivity settings?