Is Trojan.GenericKD.79646462 another false positive?

abramesd

I reinstalled Dropbox after it stopped working on Windows 11 LTSC and as part of the reinstall I moved the local Dropbox folder to G:\DropBox.

Now I am getting the following message from BitDefender:

"The file G:\Dropbox\.dropbox.cache\new_files\815a07d28ec8309b9fc9e332ada55869 is infected with Trojan.GenericKD.79646462 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean."

This is repeated about every 30 minutes.

I think this is a file created by the DropBox Sync because DropBox looks like it is having an issue with syncing a file. DropBox says it needs permissions to access the file.

I am not sure how to resolve this.

Alexandru_BD

Hello,

I think the detection name alone isn’t enough to confirm whether this is a false positive…
Also, the fact that the file is located in Dropbox’s cache does not necessarily mean it belongs to the Dropbox application, it may be a file that Dropbox is attempting to download or synchronize. The notification repeating every 30 minutes likely means Dropbox keeps retrying the same file after Bitdefender quarantines it.

For now, I would recommend:

1. Pause Dropbox syncing temporarily.
2. Run a full System Scan, as suggested in the notification.
3. Check the Dropbox desktop app under Sync & storage → View issues to see whether it identifies the original file associated with the sync error.
4. Submit the quarantined file to Bitdefender Labs using the false positive submission form available here. They will analyze the sample to determine if this is an incorrect detection or not. If a false alarm is confirmed, it will be corrected within hours.

Avoid restoring the file or adding the entire Dropbox folder to Bitdefender’s exceptions until the file has been confirmed as safe. Excluding the complete folder could allow other potentially harmful synchronized files to bypass scanning.

Regards