OK. Thanks for all the information.
But, I would have been happy (may be many more) if I get an option to
disable Encyrpted.PDF alone.
Regards,
ANANT.
----- Message from [email protected] ---------
Date: Mon, 20 Jun 2011 14:16:08 +0200
From: Tomasz Kojm <[email protected]>
Reply-To: ClamAV users ML <[email protected]>
Subject: Re: [clamav-users] How to disable blocking Encrypted.pdf alone
To: ClamAV users ML <[email protected]>
On Mon Jun 20 2011 13:40:06 GMT+0200 (CET)
ANANT S ATHAVALE <[email protected]> wrote:
Dear Tomasz Kojm,
But by setting ArchiveBlockEncrypted = off, I will not be able to detect
even encrypted zip, am I right?
Yes, you're right. However please keep in mind we create sigs for
encrypted malware, so you should still be able to catch real threats.
May be I should disable ScanPDF?
This will disable the PDF parser, which is required for most sigs for
PDF malware. Disabling ArchiveBlockEncrypted will be more safe.
--
oo ..... Tomasz Kojm <[email protected]>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Mon Jun 20 14:11:04 CEST 2011
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
----- End message from [email protected] -----
Regards,
Anant Athavale.
------------------------------------------------------------------------------
Confidentiality Notice: This e-mail message, including any attachments, is for
the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.
------------------------------------------------------------------------------
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
