2011/7/11 Török Edwin <ed...@clamav.net>: > On 2011-07-11 09:08, Manish Kathuria wrote: >> We are using clamd along with amavisd-new for scanning emails and the >> messages having PDF attachments with password protection are being >> blocked with the alert : >> >> INFECTED, message contains virus: Heuristics.Encrypted.PDF >> >> Since most of these password protected PDFs are important documents >> like bank statements, I want to skip this particular check. I have >> tried various permutations but could not figure out the exact >> parameter which can be used in clamd.conf file to exclude this >> specific category. I also created a local.ign2 file in the virus >> database directory with the a single line containing the term >> Heuristics.Encrypted.PDF in it but it had no effect. >> >> Any suggestions ? > > In clamd.conf: > ArchiveBlockEncrypted no. > > Or you can try this patch (which will be in 0.97.2): > https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2988#c1 > > Best regards, > --Edwin > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml >
Thanks Edwin and Anant. Since I searched for the keyword Heuristics .Encrypted.PDF, I missed the earlier message related to PDFs. -- Manish _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
