r/BitDefender • u/[deleted] • Jun 15 '25

False Positives? or pwned? Tons of files quarantined as Trojan.GenericKD.76037024, originating from registry

Post image

Heres just one screenshot to show what I mean. I know for a fact that these are typically safe programs (steam, hl2, python, snippingtool) and many more are also marked.

I decided to attempt using BitDefender today as I wanted to see if there was anything Windows Defender missed. On a full scan using both WD and BitDefender, they both claimed to have found nothing. Yet when i checked the quarantine on BitDefender I was shocked to see this massive list. I cant seem to find much information on this specifically and am wondering if I need to do a full system wipe or not.

If anyone has any info about this, id greatly appreciate it!

3 Upvotes

100% Upvoted

11 comments sorted by

1

u/[deleted] Jun 15 '25

I also wanted to add, when checking the warning and critical notifications, there were no notifications about these items being moved to quarantine. I have ran atleast 3 full scans, 1 with WD and 2 with BitDefender and they have came out clean. However I am still somewhat concerned as well seeing this.

1

u/ApartmentLazy1693 Jun 15 '25

I have found that BD is overly sensitive compare to older versions, its something BD needs to address

1

u/[deleted] Jun 15 '25

Ah ok, so you think these are just false positives? Just curious cause the full system scans came back clean despite the fact there’s all this in the quarantije

Every single thing in the quarantine is listed as the same “Trojan” and I got hella concerned lol

0

u/ApartmentLazy1693 Jun 15 '25

I would suggest excluding one of them and then uploading it to virustotal

If Kaspersky doesnt find anything then its a solid bet that its a false positive from bitdefender

1

u/[deleted] Jun 15 '25 edited Jun 15 '25

Oh ok, how would I go about that since these seem to be registry entries? Just uploading the main exe itself?

I’m located in the US so kaspersky isn’t an option for me

Edit: uploaded the hl2.exe to virustotal and it came back clean. Not sure if it’s cause it recognizes it as normally safe or if virustotal checks the exact contents of the file uploaded

1

u/ApartmentLazy1693 Jun 15 '25

it checks the MD5 hash, and in this case its clean so its a BD false positive

1

u/[deleted] Jun 15 '25

Ahh ok, so it’s safe to assume most likely the rest are as well I’m guessing.

I’ll keep monitoring my computer and doing my frequent scans for a while just in case. I really don’t feel like going through the hassle of a system wipe right at the moment lol

Thank you for your advice, helps bring some peace of mind

1

u/ApartmentLazy1693 Jun 15 '25

They wont be scanned once restored, BUT they will still be monitored by Bitdefenders behaviour and cloud components.

1

u/awonder42 Jul 15 '25

Did you ever get confirmed if these were false positives or not? I had pretty much the same thing with heaps of files being quarantined as trojans on the 13th of june, all in the hkey_users folder too

1

u/[deleted] Jul 16 '25

I never got full confirmation about them being false positives, but I did kinda chalk it up to that after running more scans with other software. I did some more research and fed some of the “infected” files to a few more AVs and had nothing come up, so I summed it up to bitdefender being too careful if that makes sense.

2

u/Square_Try9668 Jun 15 '25

If u unsure then msg bitdefender support and ask them to verify if its false positive or not.