search

pipwerks / PDFObject

A lightweight JavaScript utility for dynamically embedding PDFs in HTML documents.
http://pdfobject.com/
Other
2.39k stars 986 forks source link

Example PDF on website is flagged as malware!! #306

Open mrAceT opened 2 weeks ago

mrAceT commented 2 weeks ago

I clicked the "full screen example" here:

https://pdfobject.com/examples/

And my virus scanner rang the bells!?

Then I went to https://www.virustotal.com/ and it told me that there was nothing wrong.. (previous scan one month ago) then I clicked "rescan" and it detected malware.. I don't know if the problem is real, but in any case it would be a good idea to change the example PDF so it won;t trigger anny scanner...

The current result: https://www.virustotal.com/gui/url/0f1bdd80e2fa48b2403867484eb963a485d5a27c2166f48545dfa7f740f9e9ff?nocache=1

pipwerks commented 2 weeks ago

That's weird. 3 of 96 vendors report the PDF as malicious, but 93 of 96 don't.

That PDF is really old, I created the original copy around 10 years ago.

I will look into it. Thanks for reporting!

theodore-s-beers commented 2 weeks ago

In case it's useful, here's the file re-saved as PDF/A-compliant (meant for document archival, but also a convenient way of disabling many of the features of PDF that make it a dangerous format). It comes back clean on VirusTotal.

mrAceT commented 2 weeks ago

That PDF is really old, I created the original copy around 10 years ago.

I expected something like that ;) I expect the 'cleaned up version' of @theodore-s-beers will do the trick nicely :)

pipwerks commented 1 week ago

Thanks @theodore-s-beers

I uploaded the revised version. VirusTotal still shows 2 vendors flagging it as malware, but they may just need some time to update. I will force a rescan later today.