Home Support

English

X

Select your language:

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Jonathan StevensJonathan Stevens 

idp.alexa.51 - possibly false positive?

Hi there.

In common with other people, it seems (having done a couple of searches online) I've very recently (over the past 2-3 days) had a spate of 'Threat Removed' notifications from AVG, *ALL* supposedly having found IDP.ALEXA.51 in programs I have had installed on my computer for many months - actually, probably YEARS - and which use almost daily.

AVG has also supposedly found IDP.ALEXA.51 in a few exe files which are not so easy for me to identify - they're not applications I consciously use; more likely pre-installed background things (eg c:\windows\swUSB.exe or c:\...Samsung... EasySpeedUpManager2.exe).

None of these apparently infected programmes is, as far as I can tell, a program I've only just downloaded and installed. Though, I suppose in some cases they may be automatically updated 'latest versions'.

But in all the cases I recognise, they're programs I've used for a long time and have no cause to doubt the security of, UNLESS...

... unless it's possible for a virus to infect a genuine .exe file of a genuine 'valid' software program I've had installed on my machine for ages.

*** Can anyone tell me if this scenario is possible?

If it's not, then I'll feel fairly confident in 'restoring' anything I need to use on a daily basis, and will trust that these are 'false positive' matches and that whatever has caused AVG to suddenly start finding this supposed problem in lots of files will soon be fixed by AVG.

*** Can anyone from AVG tell me. Is this the sort of thing that happens occasionally. That AVG need might become a bit 'overzealous' and find apparent danger where it doesn't exist?

Because I've seen AVG respond to similar postings with requests about which version of AVG and what threat removal messages, etc... I'll see if I can upload some screen shots of that sort of thing.

But my questions are more generic in nature. 

To reiterate/rephrase them:

a) could this be a valid danger: a virus that has somehow 'got into' .exe files that have been on my computer for years?

b) might the problems I'm facing be a temporary issue with the 'sensitivity' of AVG, that might soon be fixed by an update or patch?

Many thanks.

Jonathan
KarthikeyanKarthikeyan (Avast) 
Hello Jonathan,
We apologize for the inconvenience.
A recent update from AVG have caused this issue and AVG is working on a fix for this issue. This issue will be resolved automatically in next update. For now, you can add the program that is detected as threat to the AVG exception list. Please click on this link for the steps to add the program to exception http://avgclick.me/AddException
Thank you.
Jonathan StevensJonathan Stevens
Hello Karthikeyan

Thank you so much for such a very quick response.

I'm glad it's 'just' a problem with AVG and not a real problem with my computer!

Thank you for your help regarding how to avoid further trouble.

Regards Jonathan
KarthikeyanKarthikeyan (Avast) 
Hello Jonathan,
We appreciate your patience and co-operation regarding this issue.
Thank you
Flo welFlo wel
Hello,
I registered solely to report, that I have a similair issue.
Starting today, AVG reports noumerous exe files of programms I have on my PC since a long time.
Your reply means that I can rest assured and it's not likely, that I have several infections in exe files of well known programms, such as genuine software by logitech for my mouse etc?
However, I was not able to restore all of the false positives and a mail app, downloaded from the microsoft app store was destroyed by AVG and can not be restored, uninstalled or re-installed by AVG or the store app.
AVG is screwing up my work PC.
Please solve this issue, or I have to leave ship
Alan BinchAlan Binch
@ Flo wel
Flo, Have a look @ this AVG article (http://avgread.me/2ahGOMv).
AVG Guru
Jonathan StevensJonathan Stevens
Hi Alan

Your colleague Karthikeyan answered my second question with her comment: “This issue will be resolved automatically in next update.”
 
As for my first question though, I looked at the article you linked Flo to don't think it answers my question (it's to do with, I think, how to submit a programme file to AVG for them to test whether it really is a FALSE positive?)
 
What I was hoping to know was a more general fact:
 
Is it generally possible, or impossible, for an .exe file that has been on a computer for years, and is in use daily, to become compromised by some sort of malicious code that’s been picked up recently – in other words, can a newly introduced virus or malware on occasions somehow RE-WRITE an existing .exe file, to embed something malicious inside it?

Can you help me understand this? Thanks.
BalasubramanianBalasubramanian (Avast) 
Hello Jonathan,

Sorry for the inconvenience caused.
You can submit the threat detected file to AVG by using this link: http://www.avg.com/submit-sample
We would like to inform you that this IDP.Alexa.51 false positive issue is already fixed and the fix was released on 22nd July 2016.
We request you to update your AVG program once by following the instructions mentioned in this link: http://avgread.me/1TgZWYq and check whether the issue persists.
The answer to your question regarding the malicious file is "YES" it is possible for the virus or malware program to infect an .exe file which is there on your PC for years and also it can RE-WRITE an existing .exe file to embed something malicious in it.
It all depends on the coding of the virus and the type of virus.
Please feel free to contact us if you need any assistance.
Jonathan StevensJonathan Stevens
Many thanks for your prompt response, Balasubramanian. Thanks for your guidance on updating my AVG software. And for your answer to my question. What a scary world we live in!!!
BalasubramanianBalasubramanian (Avast) 
You are most welcome Jonathan.
Yes we live in the world where there are dangerous viruses affecting human as well as the computers and devices.
To protect computers and devices we (AVG) are there 24/7 working hard.
Please feel free to contact us if you need any assistance. We work round the clock.
Have a great day!
Andreas EggmannAndreas Eggmann
Hi-
I have just been having the same issues with AVG Free picking up idp.Alexa.51 in files that I trust the source of- 
I've just updated to the latest version of AVG free, but it still seems to be picking up these files.

User-added image
KishoreKishore (Avast) 
Hello Andreas,
We regret for the inconvenience caused. We would request you to run AVG remover tool to completely remove AVG and then re install it.  
Please click this link http://aa-download.avg.com/filedir/util/AVG_Remover.exe to download and run the AVG Remover tool.
1. Please select the AVG products which are shown in the remover tool window and then start removal process.
2. After the remover tool process is successfully finished, restart your computer.
3. After the restart,  manually delete the AVG Remover folder in the C drive of My computer.
KishoreKishore (Avast) 
4. Once uninstalled download the installation file using the link : http://www.avg.com/download to reinstall your AVG program.
5. Run the downloaded file to start the installation process.
6. Follow the instructions on your screen.  
7. Complete the installation and restart your computer.
If you are still facing any error message please provide us with the screenshot so that we could analyze the issue more better. Please follow the instructions on the article http://avgclick.me/getscreenshot to create the screenshot.
Please feel free to get back to us for further assistance.
Thank you.
Alex HoskinsAlex Hoskins

Ok I have the same problem.  AVG has falsely IDed several components of my Sage accountancy software.  Ive followed your instructions here, i.e updated to the latest 21/07 update, and Ive tried to restore the quarantined files.  Two restored fine, but two have failed, giving the errors "Removal item in wrong state" and "The object identifier does not represent a valid object".

I can now start Sage but the components that have failed to restore are responsible for serving the data so I cant access our company accounts.  There is a backup but its several days out of date and will mean a LOT of work to make it current.

What do I do?  As you can imagine this is rather mission critical.

Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello Alex,
We regret for the inconvenience caused. We are sorry for the delay in responding. What exact type of files you are unable to restore? Based on type of AVG's detection, only executable files should be removed and no data is removed. We also suggest contacting 'Sage' support to get assistance to backup/restore the data. Thank you.
David ReichardDavid Reichard

 

Same here. AVG found DP.ALEXA.51 in dropbox.exe. How do I tell if it's really a virus or just a false postive? 

KarthikeyanKarthikeyan (Avast) 
Hello David,
We understand your concern. Please be informed that, if it is infected, the threat message will be different. As you get this Alexa.51. It indicates the low level security problem which should be a false detection.
Thank you
Laurie MooreLaurie Moore
So we just purchased AVG on the recommendation of our local computer repair professional and so far so good except for this Alexa thing: EVERY time I start the computer the AVG scan interrupts startup and wants me to run the removal tool for Alexa Virus. I get a Threat Removed message every time but then it just keeps happening. Now I'm reading that AVG was working on a fix for this back in July? It's just very annoying and sometimes I don't have time for the removal process but I can't turn it off. What is AVG doing about this irritant if it's not a necessary function?
KarthikeyanKarthikeyan (Avast) 
Hello Laurie,
We are sorry to know that you still have this issue. In this case, we will send an email to get connected to our advanced support. Please follow the same and they will assist you further in fixing this issue.
Thank you
Steven HorneySteven Horney
I have also had this problem.  Currently attending school for Info Sec and have downloaded several tools which aren't dangerous and come from a valid source, primarily Wireshark and ProcessExplorer. 
Chris RChris R
Have just bought a cheap digital microscope. Drivers are dated 2004. On install of drivers AVG is showing this threat - it is not clear to me whether this is a valid threat or a false positive on old drivers.
Yamuna SathiyamurthyYamuna Sathiyamurthy (Avast)
Hello Steven and Chris,
We regret for the inconvenience caused. In order to assist you better, could you please send us the screen shot http://support.avg.com/SupportArticleView?urlname=How-to-create-a-screenshot of the issue you are facing so that we can assist you further and also please do confirm us whether you have installed the Free of Paid version?
Thank you for understanding.
Liam ReynoldsLiam Reynolds
I have the same problem but it "infected" powershell.exe I am using the Free version. Aparently this tried to connnect to a botnet when i was at school and now blocked me from using the network. Any help with this?
Liam ReynoldsLiam Reynolds
I have the same problem but it "infected" powershell.exe I am using the Free version
AravindhAravindh (Avast) 
Hello Liam,
We regret for the inconvenience caused. Could you please confirm whether you had installed AVG 2016 or 2017 version and also mention its paid or a free version?
Thank you.
Manthan TripathiManthan Tripathi
Hello,
I saw this bug was opened on July 2016 
Even after so much of time, I am getting the same issue. And I am 100% sure that its false positive. I am an application developer. I got this warning in an application which is developed by myself only. I am very sure that I have not used anything which will make antivirus think that I am hacking.

There is one more thing, I was not getting this warning earlier and suddenly it started showing the error. I have done nothing much just changed some variables. Which should not trigger this, I am sure.

Can you please justify this random behaviour? Will all my customers, who have AVG antivirus installed, will get this threat? If it is so, It will be a huge problem for me.
Abirami ShanmugamAbirami Shanmugam (Avast)
Manthan,
I completely understand your concern. Do you encounter any AVG threat detection window when trying to use any application in your PC? If so, please share the screenshot of that pop up to check and assist further. 
Alan BinchAlan Binch
@ Manthan Tripathi
Manthan, If applicable.. For your info, just in case that you are unaware, you can post the screenshot here in the topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions. 
AVG Guru
Manthan TripathiManthan Tripathi
@abirami,
My client got the warning while installing the app which I have shared him via skype.

I am sharing the screenshot belowUser-added image
Alok KumarAlok Kumar (Avast)
Thank you for providing screenshots Manthan,
May I know if you're receiving pop ups while sending a particular file (for example FaceMe.exe) or any files through Skype is getting detected by AVG Internet Security?
Best regards,
Alok.
Manthan TripathiManthan Tripathi
This is what happens when I created a Test application and sent to my client from Skype.

User-added image  
AvinashAvinash (Avast) 
Manthan,

I would request you to submit the falsely detected file to our developers for further analysis and add it to our white list. Visit this web page https://www.avg.com/en-ww/whitelist-program-application to submit the file.
Richard PorteousRichard Porteous
I just tried to download and run Amazon LumberYard. AVG stuck the file in the virus chest and said it was infected with idp.alexa.51 - definately a false positive.
Did someone 'unfix' this 
AvinashAvinash (Avast) 
Richard, if you believe AVG has detected a legitimate file as infection, please report it to use as per the instructions in this link to assist you further.
You could try to restore the file from Quarantine folder. 
Anthony WilsonAnthony Wilson
this problem is still happening, AVG has marked an app that I have been using for years and have paid for and only use the in-app auto update.
Priyanga SekarPriyanga Sekar (Avast)
Anthony, let's have a look into this together. 
Do you have the latest version of AVG AntiVirus Free/AVG Internet Security installed on your device? To find: Open AVG Internet Security > Menu > About.
Keep us updated to proceed further. 
Ali AhmedAli Ahmed

hi
i have AVG free 

software version : 19.6.3098 (build 19.6.4546.439)

virus def : 190701-4

i have updated to lastest and after the last update im getting IDP.ALEXA.51 alert on file 

\Kingsoft\WPS Office\11.2.0.8668\office6\wps.exe

previously i got IDP.Genric on 

\Kingsoft\WPS Office\11.2.0.8668\office6\wpsupdate.exe

 

Please advise

Priyanga SekarPriyanga Sekar (Avast)
Hi Ali, 
Thank you for clarifying us with more information. 
Please remove and reinstall AVG AntiVirus free on your PC to verify the status. 
Run AVG clear and remover tools as mentioned in this article (https://support.avg.com/SupportArticleView?l=en&urlName=Uninstall-AVG-software-Clear-Remover&supportType=home).
Reinstall the program by referring this article (https://support.avg.com/SupportArticleView?urlname=Download-and-install-AVG-AntiVirus-Free) and inform us here. 
 
Anthony WilsonAnthony Wilson
I'm know getting having the same problem with my email client Outlook 2010 and I have told AVG app to "Create Exception" but the error message keeps coming up and crashing Outlook.

I have been able to create a screenshot, it's attached to this message:
screen shot, AVG Behavior Shield

AVG Internet Security
software version: 19.6.3098 (build 19.6.4546.508)
virus def version: 190724-6
Dinesh KrishnanDinesh Krishnan (Avast)
We're sorry to know that, Anthony. 
This seems to be possibly a false positive. In this regard, we suggest you to submit a false positive request by visiting this link (https://www.avg.com/en-us/false-positive-file-form).
Before proceeding with that, update AVG once & then restart your computer to check if the issue persists. 
To update : Click on refresh icon beside Virus definitions that is available in the homepage of AVG Internet Security. 
Anthony WilsonAnthony Wilson

I'm know getting having the same problem with my email client Outlook 2010. AVG found a threat in Outlook.exe saying it's infected with IDP.ALEXA.51 and I have told AVG app to "Create Exception" but the error message keeps coming up and crashing Outlook.

I have been able to create a screenshot, it's attached to this message:
screen shot, AVG Behavior Shield, IDP.ALEXA.51

AVG Internet Security
software version: 19.6.3098 (build 19.6.4546.508)
virus def version: 190724-6
Anthony WilsonAnthony Wilson
Just uninstall AVG IS completely and Grammarly add-in that was in Outlook. The reason why I uninstalled Grammarly is that during the restarts of Outlook is because Outlook showed a pop saying the Grammarly had crashed Outlook. So I'm not sure if Grammarly caused the issue or AVG IS reporting a known false positive of IDP.ALEXA.51. In either case AVG IS is working now.
Dinesh KrishnanDinesh Krishnan (Avast)
We're glad to know that, Anthony. We appreciate your efforts in working towards fixing the issue. For further queries, feel free to write back to us.
Anthony WilsonAnthony Wilson
Well, I spoke too soon :( I'm having the same problem. I open Outlook 2010, Grammarly crashes, Outlook and then I get the same IDP.ALEXA.51 threat detected. I have created exception and AVG still show the same screen over and over and I can't use my Outlook. I really need this to work!!!
AVG_crashed_Grammarly_and_Outlook_7-25-2019
Ranjani BakthavachalamRanjani Bakthavachalam (Avast)
Hello Anthony, 
We have to check if  IDP.ALEXA.51 is a real threat or false positive. 
We recommend you to reach us via your own post: https://support.avg.com/support_authorization_required?startUrl=/support_ask to locate the account and to assist you further. 
Anthony WilsonAnthony Wilson
Ranjani Bakthavachalam - I have submitted it.
Dinesh KrishnanDinesh Krishnan (Avast)
Thank you, Anthony. We've replied to your post. Kindly revert to us via it to keep the conversation simple & fasten the process. 
Emre ERSOZEmre ERSOZ
cmd.exe?
hello,
file seems never changed or modified from the beginning of windows installation. but avg reports idp.alexa.51. uploaded file to false-negative check tool. can you check ist fake or not?
best.
Emre
BalasubramanianBalasubramanian (Avast) 
Hello Emre,

This looks like a false detection by AVG.
May I know whether you are using the free or paid version of AVG Antivirus?
If it is the paid version, get connected with our technical chat support using this https://support.avg.com/support_tech_chat link to get further assistance.
If it is the free version, please create your own post on this community which will help us to provide further assistance.
Thank you.
Emre ERSOZEmre ERSOZ
thank you Balasubramanian for quick answer. i've got free verrdion but already uploaded file to check tool. best.
AvinashAvinash (Avast) 
Thanks, Emre.
Our concerned team will get back to you via email once the analysis is complete.
Ask a question