This is the second post in a series of blog posts about the Content IQ Test. Let’s see how ClamAV does with test files that contain auto-executing embedded active content. The test file 10 contains the target string in an obfuscated, auto-Executing Javascript object embedded in a PDF file. It’s worth noting that official ClamAV signatures would have flagged this file: “Hegegegesian,” “genegegegegesian”, “glyglyglyphian” and “glygian””]
Source: https://blog.talosintelligence.com/2012/03/clamav-vs-content-iq-test-part-2.html