Avast WEBforum

Other => Viruses and worms => Topic started by: ct36 on September 12, 2020, 05:28:29 PM

Title: IDP.ALEXA 53
Post by: ct36 on September 12, 2020, 05:28:29 PM: Without any warning or a scan i went to the virus chest and saw that a file(rpcnet.exe) was detected with'' idp.alexa 53''.This file avast has also deleted many times in the past because it was infected with ''idp.generic''(and it is being created everytime there is a windows update or an avast update).I haven't downloaded anything or played any game online(i saw that this idp.alexa was related to online games).can this just be avast's issue?there is nothing that i can find to explain this.
anyone maybe can explain why this happened?
Title: Re: IDP.ALEXA 53
Post by: Asyn on September 12, 2020, 05:34:23 PM: Test the file at VT (https://www.virustotal.com) and post the link to the result here.
Title: Re: IDP.ALEXA 53
Post by: Ethan55 on December 24, 2020, 09:57:24 PM: Just experienced the same problem after attempting to install the official driver, downloaded directly from Creative (Labs), for my X-Fi Titanium HD Soundcard - downloaded driver filename XFTI_PCDRV_L11_2_40_0019.exe file that Avast has objected to CTInstall.exe - Unless Creative Labs are sending out viruses I imagine this is false positive
Title: Re: IDP.ALEXA 53
Post by: Asyn on December 25, 2020, 05:25:27 AM: You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Title: Re: IDP.ALEXA 53
Post by: Moman1 on March 21, 2021, 03:02:23 PM: https://www.virustotal.com/gui/file/7b6eb74a3ddcc07b77151d268d7d1e5876b408f916ce628e38902e1831413be7/detection (https://www.virustotal.com/gui/file/7b6eb74a3ddcc07b77151d268d7d1e5876b408f916ce628e38902e1831413be7/detection)

Keep getting this IDP.ALEXA.53 threat warning every morning for the last week. Moved it to Avast virus chest many times and deleted it.
Ran it at virustotal.com with above result.
Don't really know what to make of it.
Title: Re: IDP.ALEXA 53
Post by: Pondus on March 21, 2021, 03:06:56 PM: Quote from: Moman1 on March 21, 2021, 03:02:23 PM
https://www.virustotal.com/gui/file/7b6eb74a3ddcc07b77151d268d7d1e5876b408f916ce628e38902e1831413be7/detection (https://www.virustotal.com/gui/file/7b6eb74a3ddcc07b77151d268d7d1e5876b408f916ce628e38902e1831413be7/detection)

Keep getting this IDP.ALEXA.53 threat warning every morning for the last week. Moved it to Avast virus chest many times and deleted it.
Ran it at virustotal.com with above result.
Don't really know what to make of it.
report it as possible FP https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438
Title: Re: IDP.ALEXA 53
Post by: Moman1 on March 21, 2021, 04:02:11 PM: thanks for the report link
Title: Re: IDP.ALEXA 53
Post by: LukasJ on March 22, 2021, 04:04:24 PM: Hi,
The file has been moved to whitelist. It won't be detected anymore.

Lukas
Title: Re: IDP.ALEXA 53
Post by: darth_shaker on March 24, 2021, 04:57:42 PM: I have been getting the same false positive in several *.ps1 files in the temp folder related to Windows Powershell after updating to the last (24/03/2021) database. They were detected by the behaviour shield.
Title: Re: IDP.ALEXA 53
Post by: Pondus on March 24, 2021, 05:00:09 PM: Quote from: darth_shaker on March 24, 2021, 04:57:42 PM
I have been getting the same false positive in several *.ps1 files in the temp folder related to Windows Powershell after updating to the last (24/03/2021) database. They were detected by the behaviour shield.
Then you report it ....
Title: Re: IDP.ALEXA 53
Post by: darth_shaker on March 24, 2021, 05:36:26 PM: I already reported it via the Avast interface.
Title: Re: IDP.ALEXA 53
Post by: ace315851 on April 15, 2021, 08:37:03 PM: still being reported as FP
Title: Re: IDP.ALEXA 53
Post by: jdominik95 on April 29, 2021, 09:57:53 AM: Today i got the idp.alexa.53 threat warning, moved it into the virus chest immediately, what baffles me is that the original place of the file was G:\program file\avast software\setup, so it seems it came with the avast update from yesterday. Is this still a false positive??
Title: Re: IDP.ALEXA 53
Post by: fruno on May 18, 2021, 05:38:28 PM: In the last couple of days, I've been getting the idp.alexa.53 message repeatedly when using Visual Studio Code, when using the terminal. Avast is blocking 'powershell.exe'. I also get the message when running powershell in admin mode, or when running Windows Terminal.

I submitted powershell.exe to virustotal.com and nothing was detected. I assume Avast is issuing a false positive, but it's concerning.

Avast doesn't have a problem with git bash, so I added it as an optional terminal in VS Code. It's a workaround, but annoying.
Title: Re: IDP.ALEXA 53
Post by: laura20todd on May 18, 2021, 05:54:12 PM: I'm having the same problem as fruno. Can't use VS Code as Avast keeps popping up and blocking Powershell. Added powershell to the exceptions list and it still does it.
Title: Re: IDP.ALEXA 53
Post by: fbp on May 19, 2021, 08:33:11 AM: I am suddenly having the same issue. I started the same NodeJs script in the same IDE PHPStorm like every day, at the end Avast Business popped up with IDP.ALEXA.53 . I didnt know what to do. My boss said I can add an exception for this.
Title: Re: IDP.ALEXA 53
Post by: sergiomc84 on May 19, 2021, 08:05:33 PM: I got same issue as fruno and laura20todd, id like to keep using the terminal as ive been doing.
Have any of you find the solution? this is really annoying
Title: Re: IDP.ALEXA 53
Post by: Douglas266 on May 20, 2021, 11:15:55 AM: Funny im not alone with this issue it seems...
Title: Re: IDP.ALEXA 53
Post by: Asyn on May 20, 2021, 12:14:01 PM: You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Title: Re: IDP.ALEXA 53
Post by: wagtal on May 20, 2021, 04:00:40 PM: Quote from: Asyn on May 20, 2021, 12:14:01 PM
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

i am having the same problem exacly
Title: Re: IDP.ALEXA 53
Post by: sqdev313 on May 24, 2021, 02:33:17 AM: Me too having same problem as fruno and laura20todd for last couple of days.
Title: Re: IDP.ALEXA 53
Post by: to.radwa on June 12, 2021, 11:32:02 AM: I'm having the same problem with rpcnetp.exe.
Avast Antivirus keeps telling me it's infected with IDP.Alexa.53 and keeps moving it to the virus chest, everyday!
Lately, I've been updating my drivers using DriverPack free software.
Is it a false positive?!
Title: Re: IDP.ALEXA 53
Post by: Pondus on June 12, 2021, 12:07:04 PM: Quote
Is it a false positive?!
https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438