Trojan.GenericKD.72209517 / crystaldiskmark8_0_5.exe - welche Gefahren drohen

Jochen Unk · 2024-04-04T14:44:56+00:00

There was an error rendering this rich post.

Guten Tag in die Runde,gestern meldete mein Bit-Defender:
Die Datei:\Users\crystaldiskmark8_0_5.exe ist mit Trojan.GenericKD.72209517 infiziert und wurde in die Quarantäne verschoben. Habe jetzt einen ausführlichen Systemscan durchlaufen lassen.
Soweit scheint alles ok.
Da ich das Programm schon vor einigen Tagen heruntergeladen und auf einigen Rechnern damit die Festplattenleistung geprüft habe, frage ich mich, was der Trojaner in dieser Zeit schon getan haben könnte.
Daher die Frage an Euch, ob jemand weiß, worum es sich bei diesem Trojaner handelt.
Danke schon mal

Jochen

Accepted answers

Flexx

https://community.bitdefender.com/de/discussion/comment/337363#Comment_337363

Trojan.GenericKD by Bitdefender is a general detection term for suspicious files or programs that exhibit characteristics similar to known trojans. It's a placeholder name used until Bitdefender can fully analyze the file and categorize it as a specific type of Trojan.

Since Trojan.GenericKD is a general detection term, it's difficult to say exactly what this specific malware can do. Being in the Trojan category, it can perform any of the malicious functions that any Trojan can do.

As for the link I provided in my previous comment, the detection has now been removed by Bitdefender. You can check the VirusTotal link stated in my above comment.

Regards

Flexx

https://community.bitdefender.com/de/discussion/comment/337363#Comment_337363

https://community.bitdefender.com/de/discussion/comment/337424#Comment_337424

1) If you delete any file from quarantine, it is removed from your system permanently.

2) The file that you are downloading got detected because of the real-time protection feature in Bitdefender, which scans files as soon as you start downloading or as soon as the download gets completed.

3) If the file is self-extracting, Bitdefender will scan the extracting files in real-time and will detect only the files that are malicious or act as malicious.

4) As told earlier, Trojan.GenericKD by Bitdefender is a general detection term for suspicious files or programs that exhibit characteristics similar to known trojans. It's a placeholder name used until Bitdefender can fully analyze the file and categorize it as a specific type of Trojan.

Moving towards, Malware (ai Score=85), Bitdefender Malware Detection is a robust feature within the Bitdefender security suite. It employs sophisticated algorithms and artificial intelligence to identify and neutralize malicious software, including viruses, Trojans, spyware, and other threats. When the AI Score reaches 85, it indicates a high level of confidence that the detected file is indeed malware.

5) The VirusTotal link has been shared with the malware researchers, and it will take a maximum of 72 hours to receive a reply from them.

You can always submit a file or website to the malware research team by visiting the stated link https://www.bitdefender.com/support/contact-us.html?last_page=BusinessCategory . If any changes are made to file, such as the removal of detection or the creation of detection, it will happen within a maximum of 72 hours. This way, you will know whether the file is malicious or not.

Regards

Flexx

https://community.bitdefender.com/de/discussion/comment/337457#Comment_337457

You can share the file on the link you shared in your above-stated comment, but I already did the same on your behalf. The detection may or may not be removed after a time period of 72 hours. After that, you can refresh the VirusTotal scan result or update your Bitdefender product and scan the file again. If the detection stays, the file is considered malicious. If the detection is removed, the file was incorrectly blocked and the detection was removed.

Regards

All comments

Flexx

https://community.bitdefender.com/de/discussion/99447/trojan-generickd-72209517-crystaldiskmark8-0-5-exe-welche-gefahren-drohen

CrystalDiskMark is benchmark software that measures the transfer speed of various media storage drives such as HDDs, SSDs, USB memory, SD cards, and NAS drives.

The detection is most probably a false positive, and various versions of the same software have been reported to malware researchers to have the detection rechecked and removed.

As of now, you are protected, and there is nothing wrong with your system. If possible, could you upload your version of CrystalDiskMark on virustotal.com and share the link here? This will allow it to be shared with malware researchers for rechecking.

I have forwarded the below mentioned version of CrystalDiskMark to malware researchers to get it rechecked and removed from detection database, but I would require your versin of software also.

https://www.virustotal.com/gui/file/2fc1e92c7aec2992c73f3fc3a412dd590ab8d500fb55dfa85a3d1729ab06af0f

Regards

Jochen Unk

Dear Flex,
Thanks for the information.

As I removed the programm from the system and the USB-Stick, I don´t know how to find it again or get it out of quarantaine - sorry.
I can´t say, which version I have downloaded. I had one version, where I got a screen in Japanese, which installed itself after pressing "ENTER".

So I hope, it was not a trojan.

But do you know, what Trojan.GenericKD.72209517 would do, if it was there.

Thanks and best regards

Flexx

https://community.bitdefender.com/de/discussion/comment/337363#Comment_337363

As for the link I provided in my previous comment, the detection has now been removed by Bitdefender. You can check the VirusTotal link stated in my above comment.

Regards

Jochen Unk

Thanks for the information. which was helpfull for me.
I wondered, why your files were removed by bitdefender (probably before I made the download) and my file was detected positive.

So I got the file out of quarantaine and uploaded it.

The file is a selfextracting archive with mor than 340 files.
Scanning with my own bitdefender again shows 2 hits now:

Trojan.GenericKD.72209516
Trojan.GenericKD.72242668

In VirusTotal ist is detected by 9 of 60 VisusScanners:

6 (included bitdefender) describe it asTrojan.GenericKD.72209517
1 describes it as Trojan.GenericKD.72209517(B)
1 describes it as Malware (ai Score=85)
1 describes it as Trojan.Generic.D44DD46D

Here is the link: www.virustotal.com/gui/file/33d0e2b1bcf983207f330f2acf422bf239bc2dd8c324bcc7b7f55461c1890c53/detection
https://www.virustotal.com/gui/file/33d0e2b1bcf983207f330f2acf422bf239bc2dd8c324bcc7b7f55461c1890c53/detection

My file is back in quarantaine now.

Flexx

https://community.bitdefender.com/de/discussion/comment/337363#Comment_337363

https://community.bitdefender.com/de/discussion/comment/337424#Comment_337424

1) If you delete any file from quarantine, it is removed from your system permanently.

Regards

Jochen Unk

Thanks again to Flexx for the information.
One last question:
You said, the file I uploaded to VIRUSTOTAL is shared to the malwareresearchers and there will be an answer within 72h.
Does it mean, I should not upload it to https://www.bitdefender.com/consumer/support/answer/29358/

again?
And if so, how do I get the answer for the file I uploaded already to VIRUSTOTAL

Thanks and best regards

Flexx

https://community.bitdefender.com/de/discussion/comment/337457#Comment_337457

Regards

Jochen Unk

Seems to be ok.
In Virustotal at the moment only 3 Programms detect a virus. Bitdefender is not detecting in Virustotal and also in my own system.
Thanks for support.

Flexx

https://community.bitdefender.com/de/discussion/comment/337499#Comment_337499

Nice to know that your issue has been resolved.

Regards