--On 19 January 2011 14:56:54 +0200 Török Edwin <edwinto...@gmail.com>
wrote:
On 2011-01-19 14:28, Ian Eiloart wrote:
Hi,
I'm getting a lot of reports of "BC.PDF.Producer.JSHIP FOUND" in the
logs for my outbound mail stream today. This signature seems to be
matching every email sent with a PDF file attached.
Switching off PDF scanning on outbound email seems to fix the problem,
but this clearly isn't a sustainable solution.
Please submit a false positive on
http://cgi.clamav.net/sendvirus.cgi
I tried to make a report there, but could not. I was told that the
attachment wasn't detected. This is despite the fact that I could not get
ANY pdf file through my mail system. I got 650 rejected emails in a couple
of hours.
It seems to me that the submission form could usefully be improved by the
addition of guidance on what to do in the event that an upload sample isn't
detected, but a false positive is being reported.
Thanks,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
--
Ian Eiloart
IT Services, University of Sussex
01273-873148 x3148
For new support requests, see http://www.sussex.ac.uk/its/help/
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
