False positive - what is Trojan.GenericKD.48174843?

Mizgal

Hello, 

my BitDefender detected Trojan.GenericKD.48174843 in a file:

"Kwestionariusz_wstępnego_wywiadu_przesiewowego_przed_szczepieniem_osoby_dorosłej_przeciw_COVID-19_(wersja_docx).docx" from https://www.gov.pl/attachment/c6109501-068a-410c-a3b5-05e2f4eb8efe

Which is weird because I opened this file before and it worked just fine. It is from official polish government's website. I do not think it is really a virus, however I would appreciate to be sure. That is why I would like to be told if it is indeed false positive and if not what danger did it posed to my safety. 

Flexx

https://community.bitdefender.com/en/discussion/comment/309931#Comment_309931

I have just received an update from the malware research team through the support team. The detection for the file has been removed.

https://www.virustotal.com/gui/file/2a6eea57c4585ad9a7b27dbe4dabbc22884741a7a21794ac7ac683e1c26894dc?nocache=1

Regards

Alexandru_BD

Hello @Mizgal and welcome to the Community!

Thank you for bringing this to our attention. Indeed, this is a false positive and the fix will be implemented via an automated update.

Best regards.

Mizgal

Thanks, I am feeling safer!

Best ragards!

Wolf306

Hello, I have the same issue.

Is the update be released?

Thank you

Flexx

As checked the detection has been removed.

https://www.virustotal.com/gui/file/1c6850532513b579235adb43218c2c5cc1b5b94416de75331f55eacf01be1e2b?nocache=1

Regards

Jega

Bitdefender is detecting a Trojan.GenericKD.50160359 on online.michiganfirst.com/ which is an official banking website. I contacted the bank, which says everything is OK. I also filed a false positive report 4 days ago but the problem isn't resolved. Does that mean the bank's website is infected? Virustotal says it's not, but I don't know what to think.

Gjoksi

@Jega

The site opens without any problems on my phone.

@Alexandru_BD and @Mike_BD Please, take a look here. Thanks.

Tim326

Thankful for the little by little useful exercise. Has conclusively the ordinary impact.

Gjoksi

@Alexandru_BD

BUT, when i tried to open the site on my laptop, here are the results with the latest Bitdefender database updates:

I think that ONLY the malware research engineers from Bitdefender Labs can solve this issue. So, @Jega, you must wait for their response.

Regards.

Flexx

https://community.bitdefender.com/en/discussion/comment/309923#Comment_309923

@Gjoksi79_ - Can you share the virustotal link, will get it checked by malware researchers.

Regards

Gjoksi

@mrmirakhur

Here it is:

https://www.virustotal.com/gui/url/49467a2bbb3a1d339ced726943edd29ef5c543fa48e292f470e5666d19a386f2

https://www.virustotal.com/gui/url/630a73c29d459879f1f02615322e30b22a68ee7fa85745f8bd227f48e0352469

Regards.

Flexx

https://community.bitdefender.com/en/discussion/comment/309930#Comment_309930

Thanks, got hold of the actual .dll file. Seems like a false detection. Will get it checked with malware researchers.

https://www.virustotal.com/gui/file/2a6eea57c4585ad9a7b27dbe4dabbc22884741a7a21794ac7ac683e1c26894dc

Regards

Alexandru_BD

@mrmirakhur, @Gjoksi79_ my hat's off to you guys, great effort.

Thank you!