Jump to content

Sejda Desktop (Exploit False Positive while splitting PDF)


revpjbbq
Go to solution Solved by Arthi,

Recommended Posts

It is not clear if I should be placing this report in the Exploit Forum, based on the name of the notification, or as suggested by Sejda Desktop knowledge base to place it in the File Detection forum.

 

Malwarebytes interfering with Sejda Desktop while attempting to split a pdf.

I had to turn off Exploit Protection to split the PDF I just created.

Sejda Desktop sent me to a support page that asked if I was using Malwarebytes, and if so, to report it here on your forums.

 

 

Sejda Desktop Exploit.txt

Link to post
Share on other sites

2 hours ago, revpjbbq said:

It is not clear if I should be placing this report in the Exploit Forum

You are in the correct place. I have asked someone to assist you.

In the mean time, Have you made ANY changes in the advanced exploit section since installing Malwarebytes?

If so or unsure, reset defaults please.

image.png.db204c1d097a3fb82aed0594a605d285.png

Edited by Porthos
Link to post
Share on other sites

4 minutes ago, Porthos said:

You are in the correct place. I have asked someone to assist you.

In the mean time, Have you made ANY changes in the advanced exploit section since installing Malwarebytes?

I just went in to the advanced settings sections, took screenshots of each setting page, hit the Restore Defaults button on each page, hit the Apply button.

After comparing the screenshots to the settings as they are now, there were no changes at all. Nor were any changes observed when I hit either buttons, but I wanted to be sure.

I've had Malwarebytes installed for a few years, so I had to check in this way, but I didn't think I had made any changes, and the results are as I expected.

Link to post
Share on other sites

On 8/22/2023 at 8:06 PM, Arthi said:

Hi revpjbbq,

Thanks for posting.

Can you please go to the settings menu->Exploit protection-> Protected applications and turn off these 2 toggles. Thanks.

image.png.f3e7a19b4ec2454a6d6f40f2c75e1581.png

I few minuted ago I have toggled java.exe (Java) to the off position. I'm inclined to turn it back on as this issue has only occurred the one time.

jp2launcher.exe (Jave Process Launcher) did not have an entry.

Additional information:

This Exploit Protection trigger and blocking only occurred when splitting a particular two page PDF with Sejda PDF Desktop I created with PDF Creator 5.1.1.

Other PDFs I have created afterwards have not triggered this exploit protection in the past two days. Also PDF Creator 5.1.2 has been released and installed on my system at this time and I have successfully split PDFs without turning off java.exe (Java) exploit protection during that time.

I can't obfuscate the PDF due to the nature of the document probably without changing its structure in a way that would not make it useful to determine the cause for it to trigger an exploit protection in Malwarebytes.

Thank you for all of your assistance. I will consider this the solution and will make a new post if it happens again in the future.

Please let me know if there is any data I can collect or share further, if you wish.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.