[clamav-users] ArchiveBlockEncrypted and PDF

[Reindl Harald]

Am 13.09.2017 um 15:45 schrieb Gandalf Corvotempesta:
> Hi to all
> I would like to block any encrypted/password protected ZIP/RAR, ....
> and so on but *NOT* blocking any encrypted PDF.
> Currently, ClamAV is blocking any encrypted PDF with Heuristics.Encrypted.PDF
> 
> How can I only block real archived and not PDF (that are not archives) 

short answer: you can't and you can stop seeking around - and yes that's 
terrible as most of the Heuristics options which are thrwoing the child 
out with the bath