Avast WEBforum

Other => Viruses and worms => Topic started by: Aleksey9486 on March 23, 2023, 07:05:59 PM

Title: Virus like IDP.HELU file-less
Post by: Aleksey9486 on March 23, 2023, 07:05:59 PM
Not so long ago, after installing one game, Avast periodically (about 1 hour after starting the computer) began to blame Windows powershell.exe that he is a virus of the type IDP.HELU.PSS21. I'm a beginner and I don't know much about such viruses. Can someone help me with this? Could this be a false positive? :-\
Title: Re: Virus like IDP.HELU file-less
Post by: redwolfe_98 on March 24, 2023, 01:29:58 PM
you should go to a malware-removal forum to get help with removing malware from your computer. 2 that i know of, one at malwarebytes.com forums and one a bleepingcomputer.com forums.
Title: Re: Virus like IDP.HELU file-less
Post by: Aleksey9486 on March 24, 2023, 02:32:49 PM
 I have tried, but there is no answer anywhere yet. Somewhere inside I'm still hoping it was a series of false positives. :-\
Title: Re: Virus like IDP.HELU file-less
Post by: redwolfe_98 on March 24, 2023, 03:25:25 PM
I have tried, but there is no answer anywhere yet
i think your post, asking for help, must have been overlooked. you could try bumping the post by posting a reply to it or create a new post, asking for help.

usually people seem to get quick replies when asking for help.

there has been a lot of malware activiity, lately. i don't think that what you seeing is a false-positive.

i already mentioned that there are 2 malware-removal forums that i am familiar with, one at
malwarebytes.com forums and one at bleepingcomputer.com forums. go to one of those mlaware-removal forums and ask for help, there, with removing malware from your computer.

another option would be to do a clean reinstall of windows, in order to remove the malware. a clean reinstall is where you completely erase all data on the harddrive before reinstalling windows. it is not hard to do but it is time-consuming.
Title: Re: Virus like IDP.HELU file-less
Post by: Aleksey9486 on March 24, 2023, 03:42:46 PM
Anyway, thanks for the advice
Title: Re: Virus like IDP.HELU file-less
Post by: rocksteady on March 25, 2023, 12:07:25 PM
A screenshot of the actual warning pop-up, including the Details part, may help understanding and which shield is detecting the issue.

There have been similar issues reported on both Avast and AVG forums (same company) which may be of interest:

https://forum.avast.com/index.php?topic=293999.0

https://support.avg.com/answers?id=9065p0000000mAbAAI

You could try Repair of Avast and see if that solves anything.
You could download Malwarebytes, disable the real-time components, and run a scan with that to see the result. Uninstall after.
Title: Re: Virus like IDP.HELU file-less
Post by: polonus on March 25, 2023, 04:37:39 PM
This is an old issue/conflict with avast & avg concerning AutoHotkey
(-> programming language) installs,

Report here: Please report it here: https://www.avast.com/false-positive-file-form.php
Might be because of a script you are running.

polonus