Dropbox False Positives?

[ErikMouse]

I have been seeing these results coming up for the last few days and not sure if they are false positives.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 11/19/21
Scan Time: 2:44 AM
Log File: 86fcf732-490c-11ec-abf1-00248199f553.json

-Software Information-
Version: 4.4.10.144
Components Version: 1.0.1499
Update Package Version: 1.0.47353
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1348)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 413801
Threats Detected: 5
Threats Quarantined: 0
Time Elapsed: 21 hr, 44 min, 41 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 5
Malware.AI.4250219427, C:\USERS\ERIK\DROPBOX\EM DOWNLOADS\CDBXP_SETUP_4.5.5.5666.EXE, No Action By User, 1000000, 0, 1.0.47353, AEFCF624ED3D756BFD5533A3, dds, 01516684, F827A77C4A70F471E5C529D791A2B474, CF7111B02791994DB7F33E59F22DB47E0E5AC7F885173E9144B41B5FB034834A
Malware.AI.4242822562, C:\USERS\ERIK\DROPBOX\EM DOWNLOADS\CDBXP_SETUP_4.5.5.5767.EXE, No Action By User, 1000000, 0, 1.0.47353, DCD93352AD0C0C57FCE455A2, dds, 01516684, A302F56DD2B4EBBB7090D66006510D9C, 656101CF1C72880055D1A1539F8738D909B69E85533F8E7FF27608187060B956
Malware.AI.4266496092, C:\USERS\ERIK\DROPBOX\EM DOWNLOADS\CDBXP_SETUP_4.5.6.5844.EXE, No Action By User, 1000000, 0, 1.0.47353, 8C3A5B33922D91ABFE4D905C, dds, 01516684, AC777821BCDE0A95D6DD09CA8C49E46D, 4E6F7A6A323EDC3D876027FB5D4020ED3CE017C866000FC9643318959903D0A9
PUP.Optional.DLLEscort, C:\USERS\ERIK\DROPBOX\EM DOWNLOADS\DLLESCORT_SETUP.EXE, No Action By User, 3497, 495034, 1.0.47353, , ame, , 9942CC13D0E4B6D309A05C8FDD521756, 7A214215F80B984A86B61A52FFA92C4E229A90F7F43B4B9550DA6E0EF91B7656
PUP.Optional.SpyHunter, C:\USERS\ERIK\DROPBOX\EM DOWNLOADS\SPYHUNTER-INSTALLER.EXE, No Action By User, 5075, 331753, 1.0.47353, , ame, , FF00E6F2FA487FC76629666127044DEA, 749321BA114A07F765587A29370CF0FCCECD4CEB3DAC31852DB7945CBF831D3D

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)EM Downloads.zip

[miekiemoes]

Hi,

These aren't False Positives. The files aren't dropbox related, but installers from programs which are being dropped in your dropbox. The PUP.Optional ones are valid detections (PUP means, Potentially Unwanted Program).

The Malware.AI ones are generic detections, but I've noticed that these files are also Potentially Unwanted Programs as they are bundled OpenCandy: https://blog.malwarebytes.com/detections/pup-optional-opencandy/

Detection will be adjusted for these so it will be detected as PUP.Optional.OpenCandy.