On 2011-07-11 09:08, Manish Kathuria wrote: > We are using clamd along with amavisd-new for scanning emails and the > messages having PDF attachments with password protection are being > blocked with the alert : > > INFECTED, message contains virus: Heuristics.Encrypted.PDF > > Since most of these password protected PDFs are important documents > like bank statements, I want to skip this particular check. I have > tried various permutations but could not figure out the exact > parameter which can be used in clamd.conf file to exclude this > specific category. I also created a local.ign2 file in the virus > database directory with the a single line containing the term > Heuristics.Encrypted.PDF in it but it had no effect. > > Any suggestions ?
In clamd.conf: ArchiveBlockEncrypted no. Or you can try this patch (which will be in 0.97.2): https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2988#c1 Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
