Trojan.Maljava found by Symantec Endpoint Protection

Question

Our Symantec Endpoint Proctection suddenly identifies the yEd Graph Editor as Malware Trojan.Maljava This appears on all machines that try to start the yEd Graph Editor.

Answer 1

What version of yEd are you using? What installer did you use?

The current yEd version 3.17.2 requires Java 8 (and the current installers come with Java 1.8.0_152 bundled). According to Symantec's Trojan.Maljava details, Java 8 is not affected by the vulnerabilities Symantec calls Trojan.Maljava.
In short, I do believe this to be a false alarm. yEd is not malware!

Comments

version 3.16.2.1 java is the newest 8.0_152. I reported symantec the yEd.jar as false positive and restored the file.