IDP.generic - is it a false positive?

[wthielke]

Avast flagged a recently installed application as having IDP.generic shortly after starting the application. It didn't flag it before running the application.

The first time this occurred, the file had been put in the Virus chest, but I didn't know what to do with it. I managed to reinstall the software and ran it again. It was again flagged with IDP.generic shortly after starting the app. This time, I uploaded the file to Virus Total, which said "no engines detected this file". Furthermore, Avast on my computer also did not detect it in the suspect file.

Does this mean it is a false positive?

Wes

[Asyn]

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

[PDI]

Hi Wes,

it may be FP but we need to check the file. Can you share the VT link where you checked a detection's state?

Thanks,
PDI

[wthielke]

Here's the VT link:

https://www.virustotal.com/gui/file/8e152a4a6a9ca54ad137691ceb330688dd514da097d7cf5ba32ebf1b42f74491/details

[JanK]

It is FP - will be fixed in next update.

[pcmichu]

Hi,
I have IDP.generic detection on game instaled via ubi luncher. I chack it on VT but there is no engine detected. Can any one tell me is false positive detect?
VT link : https://www.virustotal.com/gui/file/700448b4ed09cab166167c0af02c228971885a3b92d16bfc6402495f6d256ee9/detection

[Asyn]

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

[c0mpute]

Hi Wes,

it may be FP but we need to check the file. Can you share the VT link where you checked a detection's state?

Thanks,
PDI

The site (https://www.avast.com/false-positive-file-form.php) does not really help, Why?
Because it asks me to submit a false positive to which i do not know if it is a false positive or not, simply because i do not know how to open an exe file and check.
On the second tab. you ask to submit a suspected file or website, though you do not give the option to submit my email so I could get confirmation whether or not that the suspected file submitted is a trojen or not.

Would it be better if i just got a refund from steam games on the purchase of the program and delete the game?

I just found how to submit the file in question to avast through the programs vault/chest, though still do not know how i would or could receive verification whether or not the files are trojen or not..

[Pondus]

@c0mpute

The site (https://www.avast.com/false-positive-file-form.php) does not really help, Why?
Because it asks me to submit a false positive to which i do not know if it is a false positive or not, simply because i do not know how to open an exe file and check.

You do not need to know, that is why it say "report a suspected false positive"  avast lab will tell you when they reply

On the second tab. you ask to submit a suspected file or website, though you do not give the option to submit my email so I could get confirmation whether or not that the suspected file submitted is a trojen or not.

Yes there is. If you report as "suspected false positive" it ask for your mail
if you select the "report a malicious sample" it does not ask for your mail



https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

[DavidR]

See attached image - Suspected FP.

[David354]

I have been using VPN unlimited on four desktop computers for several years. All of a sudden I am getting this IDP.Generic warning on two of them when I try to update my VPN unlimited, so now I can't update it.

[polonus]

Keep Your Software, OS, and Drivers Up-To-Date.

What Is IDP Generic?

IDP Generic, IDP is short for for identity protection; your computer flags this through anti-virus software. IDP Generic can be one of the folliwing two cases:

FP a.k.a. a false-positive: This occurs when your antivirus software doesn’t recognize a particular executable file for instance. Therefore, it mistakenly generates a virus warnings, meant for normal files.

AVG and Avast are known to sometimes come up with such a FP-detection. You could report here or take a second opinion at VT to double-check.

The real McCoy is a trojan virus and this is a very dangerous virus that hackers create to blackmail,
steal money, related information about your identity, or even take control of all, of your computer.

polonus