Since about an hour or so, all emails with pdf attachments are being quarantined. This is seriously disruptive. I could not find any reference on the web to "BC.PDF.Producer.JSHIP".
clamd.log: Wed Jan 19 11:02:12 2011 -> SelfCheck: Database status OK. Wed Jan 19 11:13:20 2011 -> SelfCheck: Database modification detected. Forcing r eload. Wed Jan 19 11:13:21 2011 -> Reading databases from /usr/local/share/clamav Wed Jan 19 11:14:22 2011 -> Database correctly reloaded (875467 signatures) Wed Jan 19 11:25:48 2011 -> SelfCheck: Database status OK. Wed Jan 19 11:28:58 2011 -> /tmp/clamsmtpd.Ys74Uy: FOUND Wed Jan 19 11:31:00 2011 -> /tmp/clamsmtpd.3s74Uy: BC.PDF.Producer.JSHIP FOUND Wed Jan 19 11:36:25 2011 -> SelfCheck: Database status OK. freshclam.log:Wed Jan 19 11:11:25 2011 -> Received signal: wake up Wed Jan 19 11:11:25 2011 -> ClamAV update process started at Wed Jan 19 11:11:25 2011 Wed Jan 19 11:11:25 2011 -> main.cvd is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven) Wed Jan 19 11:11:25 2011 -> daily.cld is up to date (version: 12547, sigs: 30475, f-level: 58, builder: ccordes) Wed Jan 19 11:11:26 2011 -> Downloading bytecode-118.cdiff [100%] Wed Jan 19 11:11:27 2011 -> bytecode.cld updated (version: 118, sigs: 30, f-level: 58, builder: edwin) Wed Jan 19 11:11:27 2011 -> Database updated (876719 signatures) from database.clamav.net 0.96.5 running on Solaris 10. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml