Since about an hour or so, all emails with pdf attachments are being
quarantined. This is seriously disruptive. I could not find any
reference on the web to
"BC.PDF.Producer.JSHIP".

clamd.log:

Wed Jan 19 11:02:12 2011 -> SelfCheck: Database status OK.
Wed Jan 19 11:13:20 2011 -> SelfCheck: Database modification detected. Forcing r
eload.
Wed Jan 19 11:13:21 2011 -> Reading databases from /usr/local/share/clamav
Wed Jan 19 11:14:22 2011 -> Database correctly reloaded (875467 signatures)
Wed Jan 19 11:25:48 2011 -> SelfCheck: Database status OK.
Wed Jan 19 11:28:58 2011 -> /tmp/clamsmtpd.Ys74Uy:  FOUND
Wed Jan 19 11:31:00 2011 -> /tmp/clamsmtpd.3s74Uy: BC.PDF.Producer.JSHIP FOUND
Wed Jan 19 11:36:25 2011 -> SelfCheck: Database status OK.

freshclam.log:Wed Jan 19 11:11:25 2011 -> Received signal: wake up
Wed Jan 19 11:11:25 2011 -> ClamAV update process started at Wed Jan
19 11:11:25 2011
Wed Jan 19 11:11:25 2011 -> main.cvd is up to date (version: 53, sigs:
846214, f-level: 53, builder: sven)
Wed Jan 19 11:11:25 2011 -> daily.cld is up to date (version: 12547,
sigs: 30475, f-level: 58, builder: ccordes)
Wed Jan 19 11:11:26 2011 -> Downloading bytecode-118.cdiff [100%]
Wed Jan 19 11:11:27 2011 -> bytecode.cld updated (version: 118, sigs:
30, f-level: 58, builder: edwin)
Wed Jan 19 11:11:27 2011 -> Database updated (876719 signatures) from
database.clamav.net

0.96.5 running on Solaris 10.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to