Sophos antivirus says _responses.pdf belongs to virus/spyware 'Troj/PDFJs-B'
The issue started when I added a Javascript enabled button to an
Acrobat form. The Javascript I used is widely used to add an attachment file to
a form document. I used the example code from here. https://www.dropbox.com/s/cvbs3qkp70dte3c/importTest_20150411_1.pdf?dl=0
. It is also referenced in this forum https://forums.adobe.com/thread/1813729
. It functions well and the form can be saved.
The problem is that when the submitted form is added to the _responses.pdf
for that form, Sophos Antivirus prevents the changed _responses.pdf from being
saved. It says the _responses.pdf belongs to virus/spyware 'Troj/PDFJs-B',
and then deletes the original _responses.pdf.
I have isolated the problem to portfolio pdf files that contain, in the
portfolio, a pdf form file that uses Javascript. When I remove the “Run a
Javascript” action in the form files, the _responses.pdf file saves with no
problem. Also when I save the changed _responses.pdf file in a Windows defender
environment, there is no problem.
Using Sophos Antivirus is a decision of the company I work for so I do not
have a choice about that. However I am going to send a copy of this question to
Sophos as a forum question/bug report identifying it as a false positive.
I am not going to stop using the Javascript enabled button as it greatly
enhances user experience. I am hoping someone has a fix or workaround because
the saved _responses.pdf file is a convenient store for form response data and saves
steps.
I am using Acrobat Pro DC, In Windows 10 Pro, in a Windows networked
enterprise environment.
