Cannot Send file for analysis / False positive? / IDP.Alexa.51

I downloaded a game called Hold the Line from Steam and Avast reported it contains IDP.Alexa.51 and moved it to the virus chest. How can I tell if this is a false positive or not? According to https://support.avast.com/en-us/article/Use-Antivirus-Virus-Chest I can delete the file and submit it to Avast Threat Labs for analysis. But when I click on the down arrow next to the delete button, I don’t see that option. Only Restore and Restore As… are visible. How do I submit the file?

Thanks,

Tim

You should be able to submit for analysis, first open the chest and select the file (the check box to the left). Now you should be able to use the down arrow to open a list of other options. Select the ‘Send for analysis’ option.

See attached image.

Thanks for the reply, but the send options does not appear. I noticed that I don’t have the Scan option which was in your screenshot either.

That may possibly be related to the detection as Alexa in general is a search engine hijacker/adware if memory serves.

So there may be little benefit from submitting it for analysis.

If you try ticking one of the first two in your list, do either of them offer to Send for analysis (as these are more in line with malware detections) ?

See https://www.pcrisk.com/removal-guides/12825-idp-alexa-51-virus for general information on what it is about.

EDIT: This is general advice, under no circumstances should you download SpyHunter and whilst offering information about other AV detections its purpose is to get you to download spyhunter.

I tried checking a different file and the Send for Analysis option does appear. Is there any other way to confirm if it is a false positive?
Thanks…

Hi,

the send for analysis is not supported by the Behavioral Shield’s detections yet. It’d be available in the near future.

Could you, please, try to upload the exe file to https://www.virustotal.com and paste the link of the analysis to this thread?

Regards,
PDI

Thanks for the reply. Here’s the link:

https://www.virustotal.com/#/file/7c96e1ed17cfc02a1ba3eb02589fd462a06adf8d705eecd3399e896c59db3448/detection

Bkav - W32.HfsAutoB.B6F1

Cylance - Unsafe

So 2/67 - I’m not sure, is that good or bad?

I had to restore the exe from the virus chest in order to upload it to virustotal. So after that I tried scanning the file with Avast and IObit Malware Fighter. They both said the file is clean (more confusion).

By the way, I emailed Steam and Hexwar Games and they both said it was ‘probably’ safe.

Thanks for your help.

It’d be fixed now.

Regards,
PDI

Thanks for your help.