Virus Exploit.pdf-9669

erik_segers

Forwarding a message received (incoming message and subsequent outgoing message scanned by BD), it was returned to me by:

Mail Delivery Subsystem [MAILER-DAEMON@mrin4-b.corp.re1.yahoo.com]

with the following report:

Reporting-MTA: dns; mrin4-b.corp.re1.yahoo.com

Received-From-MTA: DNS; localhost

Arrival-Date: Sat, 9 Jan 2010 02:40:54 -0800 (PST)

Final-Recipient: RFC822; g.....@yahoo-inc.com

X-Actual-Recipient: RFC822; g.....@exchange.corp.yahoo.com

Action: failed

Status: 5.7.1

Remote-MTA: DNS; smarthost.yahoo.com

Diagnostic-Code: SMTP; 554 5.7.1 virus Exploit.PDF-9669 detected by ClamAV - http://www.clamav.net

Last-Attempt-Date: Sat, 9 Jan 2010 02:42:04 -0800 (PST)

Was is the thread having this virus now in my pc?

How to get rid of it? (a subsequent BD antivirus scan did not detect anything)

Thank you

kservik

This is not a Virus, but a false positive that has affected Email Servers that are running an outdated version of ClamAV antivirus server software.

Most ISPs should have fixed it by now and the problem has gone away.

alexcrist

Hello erikmgg,

Did that email contain an attachment?

Cris.

erik_segers

Hello erikmgg,

Did that email contain an attachment?

Cris.

Hi Cris,

no attachment to the forwarded message.

Cheers

Erik

alexcrist

I'm sorry for the extremely late reply.

I haven't been able to find anything about this detection, other than what Kimmono said above.

Have you have any other problems that might be related to this? If you didn't, then it might just have been a wrong detection from ClamAV's part.

Cris.