Author Topic: Opera auto update blocked by behaviour shield - IDP.ALEXA.54  (Read 5019 times)

0 Members and 1 Guest are viewing this topic.

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1583
Opera auto update blocked by behaviour shield - IDP.ALEXA.54
« on: October 18, 2023, 04:03:02 PM »
Behaviour shield blocked Opera Update. Is this a false positive?
I will try and submit a FP form to Avast.

EDIT: Well I put it in Quarantine but Quarantine shows as empty. How is that?
So seem unable to submit anything.
Avast scan of the stated file location indicated "No Malware".

Also Opera was updated to new version today anyway.
« Last Edit: October 18, 2023, 05:41:21 PM by rocksteady »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33982
  • malware fighter
Re: Opera auto update blocked by behaviour shield - IDP.ALEXA.54
« Reply #1 on: October 18, 2023, 09:22:20 PM »
Hi rocksteady,

You need to find out if you actually have malware on your device or if you’re getting a false positive from your antivirus, e.c. avast's.
Seek a second opinion scan - if this does not flag this could be a FP detection. (MalwareBytes Scan, VirusTotal file scan).

I would report a FP to avast's - https://www.avast.com/false-positive-file-form.php#pc
Then wait for their final verdict.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1583
Re: Opera auto update blocked by behaviour shield - IDP.ALEXA.54
« Reply #2 on: October 19, 2023, 10:31:07 AM »
As I mentioned in EDIT to original post. I cannot submit the file for False Positive. I selected to put in Quarantine, but Avast UI says Quarantine is Empty. So I have no file to submit.

Avast and and Malwarebytes scans have found no malware.

Offline Mr. Consumer

  • Full Member
  • ***
  • Posts: 134
Re: Opera auto update blocked by behaviour shield - IDP.ALEXA.54
« Reply #3 on: October 20, 2023, 08:14:03 PM »
Looks like Avast's behavior blocker only blocked the file based on its behavior. It didn't delete anything. If it's the genuine Opera browser update then it has to be a false positive.
If it doesn't auto solve and you don't get any response from an Avast official on this thread then simply create a text file, explain what has happened and share the ID that is shown at the bottom of the notification. I mean the one that starts with, 156....ends with 851z and send the text file to Avast as false positive. This should help them solve the issue if it was a false positive.
But since this is opera, a well-known browser, the chance is that Avast has already fixed the issue at the time of my writing.
Just keep this method in mind, the next time it happens.

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1583
Re: Opera auto update blocked by behaviour shield - IDP.ALEXA.54
« Reply #4 on: October 25, 2023, 05:47:55 PM »
False Positive has now been accepted by Avast.

I just received an email stating...
"Thank you for reporting this false positive.
We have now cleared its reputation in our database based on the findings and removed the detection."