Hi Still having problems with some PDF's being flagged as Heuristics.Encrypted.PDF even with version 0.97.2. Version 0.97 does not have this problem.
Example PDF which is not encrypted available if required. Regards . P Enlund At 09:15 11/07/2011 +0300, you wrote:
On 2011-07-11 09:08, Manish Kathuria wrote: > We are using clamd along with amavisd-new for scanning emails and the > messages having PDF attachments with password protection are being > blocked with the alert : > > INFECTED, message contains virus: Heuristics.Encrypted.PDF > > Since most of these password protected PDFs are important documents > like bank statements, I want to skip this particular check. I have > tried various permutations but could not figure out the exact > parameter which can be used in clamd.conf file to exclude this > specific category. I also created a local.ign2 file in the virus > database directory with the a single line containing the term > Heuristics.Encrypted.PDF in it but it had no effect. > > Any suggestions ? In clamd.conf: ArchiveBlockEncrypted no. Or you can try this patch (which will be in 0.97.2): https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2988#c1 Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
