So I am submitting this question to as a forum question/bug report identifying a false positive. I am hoping for a fix or at least a workaround because the saved _responses.pdf file is a convenient store for form response data and saves steps.
The issue started when I added a Javascript enabled button to an Acrobat form. The Javascript is widely used to add an attachment file to a form document. I used the example code from here. https://www.dropbox.com/s/cvbs3qkp70dte3c/importTest_20150411_1.pdf?dl=0 . It is also referenced in this forum https://forums.adobe.com/thread/1813729 . It functions well and the form can be saved.
The problem is that when the submitted form is added to the _responses.pdf for that form, Sophos Antivirus prevents the changed _responses.pdf from being saved. It says the _responses.pdf belongs to virus/spyware 'Troj/PDFJs-B', and then deletes the original _responses.pdf.
I have isolated the problem to portfolio pdf files that contain, in the portfolio, a pdf form file that uses Javascript. When I remove the “Run a Javascript” action in the form files, the _responses.pdf file saves with no problem. Also when I save the changed _responses.pdf file in a Windows defender environment, there is no problem.
Using Sophos Antivirus is a decision of the company I work for so I cannot change that. I am not going to stop using the Javascript enabled button as it greatly enhances user experience.
I am using Acrobat Pro DC, In Windows 10 Pro, in a Windows networked enterprise environment.
This thread was automatically locked due to age.