Opera auto update blocked by behaviour shield - IDP.ALEXA.54

[rocksteady]

Behaviour shield blocked Opera Update. Is this a false positive?
I will try and submit a FP form to Avast.

EDIT: Well I put it in Quarantine but Quarantine shows as empty. How is that?
So seem unable to submit anything.
Avast scan of the stated file location indicated "No Malware".

Also Opera was updated to new version today anyway.

[polonus]

Hi rocksteady,

You need to find out if you actually have malware on your device or if you’re getting a false positive from your antivirus, e.c. avast's.
Seek a second opinion scan - if this does not flag this could be a FP detection. (MalwareBytes Scan, VirusTotal file scan).

I would report a FP to avast's - https://www.avast.com/false-positive-file-form.php#pc
Then wait for their final verdict.

polonus

[rocksteady]

As I mentioned in EDIT to original post. I cannot submit the file for False Positive. I selected to put in Quarantine, but Avast UI says Quarantine is Empty. So I have no file to submit.

Avast and and Malwarebytes scans have found no malware.

[Mr. Consumer]

Looks like Avast's behavior blocker only blocked the file based on its behavior. It didn't delete anything. If it's the genuine Opera browser update then it has to be a false positive.
If it doesn't auto solve and you don't get any response from an Avast official on this thread then simply create a text file, explain what has happened and share the ID that is shown at the bottom of the notification. I mean the one that starts with, 156....ends with 851z and send the text file to Avast as false positive. This should help them solve the issue if it was a false positive.
But since this is opera, a well-known browser, the chance is that Avast has already fixed the issue at the time of my writing.
Just keep this method in mind, the next time it happens.

[rocksteady]

False Positive has now been accepted by Avast.

I just received an email stating...
"Thank you for reporting this false positive.
We have now cleared its reputation in our database based on the findings and removed the detection."