Skip to main content
Solved

Box drive update v2.52.305 in windows 11 a valid version or a Trojan for HID.ALEXA.52

  • June 3, 2026
  • 4 replies
  • 143 views

Box drive update v2.52.305 in windows 11 a valid version or a Trojan for HID.ALEXA.52

We have one windows 11 PC that is prompting to update to v 2.52.305 when you do Symantec business reports a detection of HID.ALEXA.H52 of the file of box.ui.exe. no other pc is reporting this update version ready?

 

Best answer by Nsundareswaran Box

Thank you for bringing this to our attention. The security and integrity of our software are a top priority. As part of our release process we submit the Box Drive installer to multiple industry-standard malware scanning services. Based on the results of those scans and our internal validation of the release, we have not found evidence of malicious code in this version of Box Drive.

 

At this time, the Symantec\Norton detection appears to be a false positive. We would like to better understand the specific conditions under which the file was flagged and work with Symantec to review the classification and address any incorrect detection.

 

If you are willing, we’d appreciate the opportunity to connect directly. We would like to schedule a meeting to discuss the issue in more detail and ensure we fully understand your environment and findings so we can work with Symatec/Norton to fix this issue. Thanks for your help!

4 replies

Rona Box
  • Community Manager
  • June 8, 2026

Hi ​@comwales, welcome to Box Community!

 

We’ll assist in updating your Box Drive. 

 

To help you assess this issue, we’ll open a support ticket and a member from the Box Product Support team will reach out via email. 

Please keep an eye out and we hope to address this as soon as possible. 

 

Thanks for posting! 


Hi, today my Norton 360 screening identified a high risk threat in BoxUI.exe: IDP.ALEXA.54 and quaranteened it. Are you aware of this? Is this a real threat? I don’t have access to my Box files right now. What can I do?


Thank you for bringing this to our attention. The security and integrity of our software are a top priority. As part of our release process we submit the Box Drive installer to multiple industry-standard malware scanning services. Based on the results of those scans and our internal validation of the release, we have not found evidence of malicious code in this version of Box Drive.

 

At this time, the Symantec\Norton detection appears to be a false positive. We would like to better understand the specific conditions under which the file was flagged and work with Symantec to review the classification and address any incorrect detection.

 

If you are willing, we’d appreciate the opportunity to connect directly. We would like to schedule a meeting to discuss the issue in more detail and ensure we fully understand your environment and findings so we can work with Symatec/Norton to fix this issue. Thanks for your help!


A quick update here we worked with Norton and this issue is fixed and released at Norton’s end.