@@ -120,6 +120,7 @@ static struct dconf_module modules[] = {

     { "OTHER",	    "DLP",	    OTHER_CONF_DLP,	    1 },

     { "OTHER",	    "MYDOOMLOG",    OTHER_CONF_MYDOOMLOG,   1 },

     { "OTHER",      "PREFILTERING", OTHER_CONF_PREFILTERING,1 },

+    { "OTHER",      "PDFNAMEOBJ",   OTHER_CONF_PDFNAMEOBJ,  1 },

     { "PHISHING",   "ENGINE",       PHISHING_CONF_ENGINE,   1 },

     { "PHISHING",   "ENTCONV",      PHISHING_CONF_ENTCONV,  1 },

@@ -109,6 +109,7 @@ struct cli_dconf {

 #define OTHER_CONF_DLP	    0x20

 #define OTHER_CONF_MYDOOMLOG	0x40

 #define OTHER_CONF_PREFILTERING 0x80

+#define OTHER_CONF_PDFNAMEOBJ	0x100

 /* Phishing flags */

 #define PHISHING_CONF_ENGINE   0x1

@@ -2232,7 +2232,7 @@ int cli_pdf(const char *dir, cli_ctx *ctx, off_t offset)

                 rc = CL_CLEAN;

             }

         }

-        if (!rc && (ctx->options & CL_SCAN_ALGORITHMIC)) {

+        if (!rc && SCAN_ALGO && (ctx->dconf->other & OTHER_CONF_PDFNAMEOBJ)) {

             if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) {

                 /* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */

                 cli_append_virus(ctx, "Heuristics.PDF.ObfuscatedNameObject");