A "modern" PDF contains JavaScript, which is interpreted as PUA by ClamAV. The alternative is clear. Add one or both of the following lines to the clamd.conf file.
ExcludePUA Packed ExcludePUA Script -- Russell Mosemann, Ph.D. Professor of Computer Science Computing Services will NEVER ask you A. for your password in email, on the phone or in person B. to enter your Concordia login information at a non-Concordia site C. to "validate", "confirm", "upgrade" or "renew" your email > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On > Behalf Of ANANT S ATHAVALE > Sent: Sunday, July 22, 2012 11:11 PM > To: [email protected] > Subject: Re: skip virus scan for a specific sender. > > Dear Michel, > > The file is zipped and contains an PDF file. The PDF file is protected > with password. But, zip file is not protected with password. > > So, please guide me an alternative. > > Regards, > Anant. > ----- Message from Michael Scheidell <[email protected]> ------ > --- > Date: Sun, 22 Jul 2012 13:20:37 -0400 > From: Michael Scheidell <[email protected]> > Subject: Re: skip virus scan for a specific sender. > To: [email protected] > > On 7/22/12 1:02 AM, ANANT S ATHAVALE wrote: > > Dear List, > > I am having an immediate requirement of skipping virus scan > for a specific user '[email protected]'. The mail > sent by this user having income tax return file is getting detected as > 'PUA'. I want to continue with blocking PUA except for this email id (for > the time being). > > Please let me know, how can I achieve this. > > > zip it with a password. > Sounds like 'incomtaxindiafiling' should be encrypted anyway. > > > > -- > Michael Scheidell, CTO > o: 561-999-5000 > d: 561-948-2259 > > | SECNAP Network Security Corporation > > * Best Mobile Solutions Product of 2011 > * Best Intrusion Prevention Product > * Hot Company Finalist 2011 > * Best Email Security Product > * Certified SNORT Integrator > > > > ________________________________ > > This email has been scanned and certified safe by SpammerTrap(r). > For Information please see http://www.spammertrap.com/ > ________________________________ > > > > > > > > ----- End message from Michael Scheidell <[email protected]> -- > --- > > > > > > Regards, > > Anant Athavale. > > > ------------------------------------------------------------------------ -- > ---- > Confidentiality Notice: This e-mail message, including any attachments, is > for > the sole use of the intended recipient(s) and may contain confidential and > privileged information. Any unauthorized review, use, disclosure or > distribution is prohibited. If you are not the intended recipient, please > contact the sender by reply e-mail and destroy all copies of the original > message. > ------------------------------------------------------------------------ -- > ---- >
