AVG Support Community
Share tips and solutions on AVG Products
Community topics
AllAVG Gurus
These community experts are here to help
-
Alan Binch
-
Borislav Angelov
-
Vladimir Bartl
-
Subhadeep Kanungo
-
Miloslav Serba
Jonathan Stevens idp.alexa.51 - possibly false positive?
Hi there.
In common with other people, it seems (having done a couple of searches online) I've very recently (over the past 2-3 days) had a spate of 'Threat Removed' notifications from AVG, *ALL* supposedly having found IDP.ALEXA.51 in programs I have had installed on my computer for many months - actually, probably YEARS - and which use almost daily.
AVG has also supposedly found IDP.ALEXA.51 in a few exe files which are not so easy for me to identify - they're not applications I consciously use; more likely pre-installed background things (eg c:\windows\swUSB.exe or c:\...Samsung... EasySpeedUpManager2.exe).
None of these apparently infected programmes is, as far as I can tell, a program I've only just downloaded and installed. Though, I suppose in some cases they may be automatically updated 'latest versions'.
But in all the cases I recognise, they're programs I've used for a long time and have no cause to doubt the security of, UNLESS...
... unless it's possible for a virus to infect a genuine .exe file of a genuine 'valid' software program I've had installed on my machine for ages.
*** Can anyone tell me if this scenario is possible?
If it's not, then I'll feel fairly confident in 'restoring' anything I need to use on a daily basis, and will trust that these are 'false positive' matches and that whatever has caused AVG to suddenly start finding this supposed problem in lots of files will soon be fixed by AVG.
*** Can anyone from AVG tell me. Is this the sort of thing that happens occasionally. That AVG need might become a bit 'overzealous' and find apparent danger where it doesn't exist?
Because I've seen AVG respond to similar postings with requests about which version of AVG and what threat removal messages, etc... I'll see if I can upload some screen shots of that sort of thing.
But my questions are more generic in nature.
To reiterate/rephrase them:
a) could this be a valid danger: a virus that has somehow 'got into' .exe files that have been on my computer for years?
b) might the problems I'm facing be a temporary issue with the 'sensitivity' of AVG, that might soon be fixed by an update or patch?
Many thanks.
Jonathan
In common with other people, it seems (having done a couple of searches online) I've very recently (over the past 2-3 days) had a spate of 'Threat Removed' notifications from AVG, *ALL* supposedly having found IDP.ALEXA.51 in programs I have had installed on my computer for many months - actually, probably YEARS - and which use almost daily.
AVG has also supposedly found IDP.ALEXA.51 in a few exe files which are not so easy for me to identify - they're not applications I consciously use; more likely pre-installed background things (eg c:\windows\swUSB.exe or c:\...Samsung... EasySpeedUpManager2.exe).
None of these apparently infected programmes is, as far as I can tell, a program I've only just downloaded and installed. Though, I suppose in some cases they may be automatically updated 'latest versions'.
But in all the cases I recognise, they're programs I've used for a long time and have no cause to doubt the security of, UNLESS...
... unless it's possible for a virus to infect a genuine .exe file of a genuine 'valid' software program I've had installed on my machine for ages.
*** Can anyone tell me if this scenario is possible?
If it's not, then I'll feel fairly confident in 'restoring' anything I need to use on a daily basis, and will trust that these are 'false positive' matches and that whatever has caused AVG to suddenly start finding this supposed problem in lots of files will soon be fixed by AVG.
*** Can anyone from AVG tell me. Is this the sort of thing that happens occasionally. That AVG need might become a bit 'overzealous' and find apparent danger where it doesn't exist?
Because I've seen AVG respond to similar postings with requests about which version of AVG and what threat removal messages, etc... I'll see if I can upload some screen shots of that sort of thing.
But my questions are more generic in nature.
To reiterate/rephrase them:
a) could this be a valid danger: a virus that has somehow 'got into' .exe files that have been on my computer for years?
b) might the problems I'm facing be a temporary issue with the 'sensitivity' of AVG, that might soon be fixed by an update or patch?
Many thanks.
Jonathan
We apologize for the inconvenience.
A recent update from AVG have caused this issue and AVG is working on a fix for this issue. This issue will be resolved automatically in next update. For now, you can add the program that is detected as threat to the AVG exception list. Please click on this link for the steps to add the program to exception http://avgclick.me/AddException
Thank you.
Thank you so much for such a very quick response.
I'm glad it's 'just' a problem with AVG and not a real problem with my computer!
Thank you for your help regarding how to avoid further trouble.
Regards Jonathan
We appreciate your patience and co-operation regarding this issue.
Thank you
I registered solely to report, that I have a similair issue.
Starting today, AVG reports noumerous exe files of programms I have on my PC since a long time.
Your reply means that I can rest assured and it's not likely, that I have several infections in exe files of well known programms, such as genuine software by logitech for my mouse etc?
However, I was not able to restore all of the false positives and a mail app, downloaded from the microsoft app store was destroyed by AVG and can not be restored, uninstalled or re-installed by AVG or the store app.
AVG is screwing up my work PC.
Please solve this issue, or I have to leave ship
Flo, Have a look @ this AVG article (http://avgread.me/2ahGOMv).
AVG Guru
Your colleague Karthikeyan answered my second question with her comment: “This issue will be resolved automatically in next update.”
As for my first question though, I looked at the article you linked Flo to don't think it answers my question (it's to do with, I think, how to submit a programme file to AVG for them to test whether it really is a FALSE positive?)
What I was hoping to know was a more general fact:
Is it generally possible, or impossible, for an .exe file that has been on a computer for years, and is in use daily, to become compromised by some sort of malicious code that’s been picked up recently – in other words, can a newly introduced virus or malware on occasions somehow RE-WRITE an existing .exe file, to embed something malicious inside it?
Can you help me understand this? Thanks.
Sorry for the inconvenience caused.
You can submit the threat detected file to AVG by using this link: http://www.avg.com/submit-sample
We would like to inform you that this IDP.Alexa.51 false positive issue is already fixed and the fix was released on 22nd July 2016.
We request you to update your AVG program once by following the instructions mentioned in this link: http://avgread.me/1TgZWYq and check whether the issue persists.
The answer to your question regarding the malicious file is "YES" it is possible for the virus or malware program to infect an .exe file which is there on your PC for years and also it can RE-WRITE an existing .exe file to embed something malicious in it.
It all depends on the coding of the virus and the type of virus.
Please feel free to contact us if you need any assistance.
Yes we live in the world where there are dangerous viruses affecting human as well as the computers and devices.
To protect computers and devices we (AVG) are there 24/7 working hard.
Please feel free to contact us if you need any assistance. We work round the clock.
Have a great day!
I have just been having the same issues with AVG Free picking up idp.Alexa.51 in files that I trust the source of-
I've just updated to the latest version of AVG free, but it still seems to be picking up these files.
We regret for the inconvenience caused. We would request you to run AVG remover tool to completely remove AVG and then re install it.
Please click this link http://aa-download.avg.com/filedir/util/AVG_Remover.exe to download and run the AVG Remover tool.
1. Please select the AVG products which are shown in the remover tool window and then start removal process.
2. After the remover tool process is successfully finished, restart your computer.
3. After the restart, manually delete the AVG Remover folder in the C drive of My computer.
5. Run the downloaded file to start the installation process.
6. Follow the instructions on your screen.
7. Complete the installation and restart your computer.
If you are still facing any error message please provide us with the screenshot so that we could analyze the issue more better. Please follow the instructions on the article http://avgclick.me/getscreenshot to create the screenshot.
Please feel free to get back to us for further assistance.
Thank you.
Ok I have the same problem. AVG has falsely IDed several components of my Sage accountancy software. Ive followed your instructions here, i.e updated to the latest 21/07 update, and Ive tried to restore the quarantined files. Two restored fine, but two have failed, giving the errors "Removal item in wrong state" and "The object identifier does not represent a valid object".
I can now start Sage but the components that have failed to restore are responsible for serving the data so I cant access our company accounts. There is a backup but its several days out of date and will mean a LOT of work to make it current.
What do I do? As you can imagine this is rather mission critical.
We regret for the inconvenience caused. We are sorry for the delay in responding. What exact type of files you are unable to restore? Based on type of AVG's detection, only executable files should be removed and no data is removed. We also suggest contacting 'Sage' support to get assistance to backup/restore the data. Thank you.
Same here. AVG found DP.ALEXA.51 in dropbox.exe. How do I tell if it's really a virus or just a false postive?
We understand your concern. Please be informed that, if it is infected, the threat message will be different. As you get this Alexa.51. It indicates the low level security problem which should be a false detection.
Thank you
We are sorry to know that you still have this issue. In this case, we will send an email to get connected to our advanced support. Please follow the same and they will assist you further in fixing this issue.
Thank you
We regret for the inconvenience caused. In order to assist you better, could you please send us the screen shot http://support.avg.com/SupportArticleView?urlname=How-to-create-a-screenshot of the issue you are facing so that we can assist you further and also please do confirm us whether you have installed the Free of Paid version?
Thank you for understanding.
We regret for the inconvenience caused. Could you please confirm whether you had installed AVG 2016 or 2017 version and also mention its paid or a free version?
Thank you.
I saw this bug was opened on July 2016
Even after so much of time, I am getting the same issue. And I am 100% sure that its false positive. I am an application developer. I got this warning in an application which is developed by myself only. I am very sure that I have not used anything which will make antivirus think that I am hacking.
There is one more thing, I was not getting this warning earlier and suddenly it started showing the error. I have done nothing much just changed some variables. Which should not trigger this, I am sure.
Can you please justify this random behaviour? Will all my customers, who have AVG antivirus installed, will get this threat? If it is so, It will be a huge problem for me.
I completely understand your concern. Do you encounter any AVG threat detection window when trying to use any application in your PC? If so, please share the screenshot of that pop up to check and assist further.
Manthan, If applicable.. For your info, just in case that you are unaware, you can post the screenshot here in the topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions.
AVG Guru
My client got the warning while installing the app which I have shared him via skype.
I am sharing the screenshot below
May I know if you're receiving pop ups while sending a particular file (for example FaceMe.exe) or any files through Skype is getting detected by AVG Internet Security?
Best regards,
Alok.
I would request you to submit the falsely detected file to our developers for further analysis and add it to our white list. Visit this web page https://www.avg.com/en-ww/whitelist-program-application to submit the file.
Did someone 'unfix' this
You could try to restore the file from Quarantine folder.
Do you have the latest version of AVG AntiVirus Free/AVG Internet Security installed on your device? To find: Open AVG Internet Security > Menu > About.
Keep us updated to proceed further.
hi
i have AVG free
software version : 19.6.3098 (build 19.6.4546.439)
virus def : 190701-4
i have updated to lastest and after the last update im getting IDP.ALEXA.51 alert on file
\Kingsoft\WPS Office\11.2.0.8668\office6\wps.exe
previously i got IDP.Genric on
\Kingsoft\WPS Office\11.2.0.8668\office6\wpsupdate.exe
Please advise
Thank you for clarifying us with more information.
Please remove and reinstall AVG AntiVirus free on your PC to verify the status.
Run AVG clear and remover tools as mentioned in this article (https://support.avg.com/SupportArticleView?l=en&urlName=Uninstall-AVG-software-Clear-Remover&supportType=home).
Reinstall the program by referring this article (https://support.avg.com/SupportArticleView?urlname=Download-and-install-AVG-AntiVirus-Free) and inform us here.
I have been able to create a screenshot, it's attached to this message:
AVG Internet Security
software version: 19.6.3098 (build 19.6.4546.508)
virus def version: 190724-6
This seems to be possibly a false positive. In this regard, we suggest you to submit a false positive request by visiting this link (https://www.avg.com/en-us/false-positive-file-form).
Before proceeding with that, update AVG once & then restart your computer to check if the issue persists.
To update : Click on refresh icon beside Virus definitions that is available in the homepage of AVG Internet Security.
I'm know getting having the same problem with my email client Outlook 2010. AVG found a threat in Outlook.exe saying it's infected with IDP.ALEXA.51 and I have told AVG app to "Create Exception" but the error message keeps coming up and crashing Outlook.
I have been able to create a screenshot, it's attached to this message:
AVG Internet Security
software version: 19.6.3098 (build 19.6.4546.508)
virus def version: 190724-6
We have to check if IDP.ALEXA.51 is a real threat or false positive.
We recommend you to reach us via your own post: https://support.avg.com/support_authorization_required?startUrl=/support_ask to locate the account and to assist you further.
hello,
file seems never changed or modified from the beginning of windows installation. but avg reports idp.alexa.51. uploaded file to false-negative check tool. can you check ist fake or not?
best.
Emre
This looks like a false detection by AVG.
May I know whether you are using the free or paid version of AVG Antivirus?
If it is the paid version, get connected with our technical chat support using this https://support.avg.com/support_tech_chat link to get further assistance.
If it is the free version, please create your own post on this community which will help us to provide further assistance.
Thank you.
Our concerned team will get back to you via email once the analysis is complete.
I was installing Western Digital 'WD Discovery'
got error:
C:\users\brand\AppData\Local\Temp\BD1E.tmp.exe
Threat name : IDP.ALEXA.51
Thanks for posting your query.
If WD discovery is a legitimate file, we request you to submit a file sample to our higher level support for analysis on the below link.
https://www.avg.com/en-us/false-positive-file-form
After analysis, our concern team will update you via email.
Thank you.
I apologize for the inconvenience.
I suggest you to submit the file sample for analysis to our concern team. They will check and contact you via email.
https://www.avg.com/en-us/false-positive-file-form
Support is currently available in English only on this forums.
You can either get help in Portugueuse language via email or continue here in English. If you choose to get help via email, please visit this web page https://support.avg.com/support_contact_form to submit your query.
If you would like to continue here, please write your own post to check your account information and send you the activation code.