Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Nancy SNancy S 

IDP.HELU.PSE17 in powershell.exe

Went to open Visual Studio (2017) I had installed since I purchased the laptop in January 2019 and it said install had failed and to re-run installer (I had updated components the other day although had not used it since then) so I re-ran the installer (downloaded from Microsoft in January 2019)  and received the AVG warning that IDP.HELU.PSE17 was found and AVG moved powershell.exe to quarantine.  I have seen previously posts that this is a recurring problem with false positives.  My AVG was updated 2-3 days ago.
AvinashAvinash (Avast) 
Hello Nancy.
We'll certainly look into this and clarify.
Could you provide a screenshot (http://avgclick.me/getscreenshot) of AVG quarantine folder? Open AVG, click Menu > Quarantine.
Nancy SNancy S

There was nothing in quarantine folder although this is the screenshot I took when I got the error:

User-added image
AvinashAvinash (Avast) 
Thank you, Nancy.
Powershell.exe is present in the location as it should be. This looks like a false positive. But to be sure, please submit a sample of this .exe file to our developers.
Visit https://www.avg.com/en-us/false-positive-file-form to submit the sample.
Sarath PriyanSarath Priyan (Sitel)
Hi John,

We'll certainly help you with this.

However to check your AVG subscription details, please create a new post with the screenshot of the detection pop-up.

Thanks in advance. 
 
Sarath PriyanSarath Priyan (Sitel)
Thank you reaching us regarding the concern.

We'll be happy to assist further..

However, we request you to create a new post under your email address registered with AVG, so you can provide the screenshot of the AVG pop-up.
Andrew HallendorffAndrew Hallendorff
Installing visual studio enterpise. False positive of Powershell still present.
Midhun AloorMidhun Aloor (Foundever)
Hello Andrew,

We apologize for the inconvenience. We'll look into this.
Please let us know if you received any error/threat message from AVG at the time of installation.
If you did, please share us the screenshot of the message, so that we can check and assist you further.
Refer to this article to take a screenshot.
You can post the screenshot here in your topic. Click on Answer & then click on the Image [mountain symbol] & follow the instructions.
Keep us posted.
c cc c
Hello everyone,
I am using the free AVG version.
I have the same problem with the latest version today.
With windowspowershell and visualstudiocode when I run my development with the latest version of ionic serve.
AVG detects the IDP.HELU.PSE20 command line PowerShell and wants to quarantine it. But after reboot the message persists when I run the ionic serve is "I need to restart Windows to quarantine PowerShell".
I uninstalled AVG for 2 other antivirus without any detection of this.
Sorry for my poor English, I'm French.
Midhun AloorMidhun Aloor (Foundever)
Greetings,

We're sorry for the inconvenience caused.
In this case, we request you to restore the file from the quarantine folder and add it to the AVG exception list.
Refer to this article to handle AVG quarantined files.
Kindly check if the issue persists after adding the file to the exception list.
Keep us updated.
c cc c
exclusion
blocked

Thank you for your reply,
I still have the same problem.
just in case I'm using windows insider.
AvinashAvinash (Avast) 
Hello CC.
Sorry for the delay in responding.
Could you click 'See details' on the threat detection pop up and share a screenshot of that window?
Didrik HansenDidrik Hansen
IDP.HELU.PSE22 INSTEAD OF 20
It's the same error I think. I'm getting it every time i'm writing npm start in the terminal. So annoying..
AvinashAvinash (Avast) 
Hello Didrik.
We regret the inconvenience.
Could you confirm the version of AVG program installed on your PC?
Open AVG, click Menu -> About to know the program version.
Didrik HansenDidrik Hansen
20.10.3157 (build 20.10.5824.618)
AvinashAvinash (Avast) 
Thank you, Didrik.
This looks like a false alarm. We'd request you to submit a false detection report to our developers.
They will analyze it and get back to you with results.
Please visit https://www.avg.com/en-ww/false-positive-file-form to submit the report.
Jens IngelsJens Ingels
Visual Studio 2022 & this false positive is still there, I tried to repair visual studio 2 times now with the same error slipping to the marks. 
Jens IngelsJens Ingels
Visual Studio 2022, these false positives keep slipping in...
Sreenu YadavalliSreenu Yadavalli (Avast)
Hello Jens,

We are glad to look into this and help you.
We request you to create a separate AVG community post by clicking the link below and post your questions in your own post, so that we will check with your AVG account and help you with additional support.

https://support.avg.com/support_ask
Thank you for your understanding.

cartlon florescartlon flores
I have about 15 computers in an office and 8 of them have been blocking powershell and showing those 2 hits. IDP.HELU.PSS17- File-less malware and IDP.HELU.PLN35- File-less malware. Both hits were blocked by the behavior shield. I have Malwarebytes business suite, and one of those PCs, Malwarebytes Anti-Ransomware popped up yesterday and said it blocked HxTsr.exe from running, which after some research is a normal Outlook file, but it can become compromised. Does anyone have any suggestions as to what I should do to mitigate any more risk of attacks?
cartlon florescartlon flores
I have about 15 computers in an office and 8 of them have been blocking powershell and showing those 2 hits. IDP.HELU.PSS17- File-less malware and IDP.HELU.PLN35- File-less malware. Both hits were blocked by the behavior shield. I have Malwarebytes business suite, and one of those PCs, Malwarebytes Anti-Ransomware popped up yesterday and said it blocked HxTsr.exe from running, which after some research is a normal Outlook file, but it can become compromised. Does anyone have any suggestions as to what I should do to mitigate any more risk of attacks? techzpod.com (https://techzpod.com/) mobdro apk (https://get-mobdrovip.com)
Subhashri DuraiveluSubhashri Duraivelu (Avast)
Hello Cartlon,
We request you to create a separate AVG community post by clicking the link below and post your questions in your own post, so that we will check with your AVG account and help you with additional support.
https://support.avg.com/support_ask
Thank you.
Ask a question
Struggling with non-AVG technology? We can fix that, too!