Powershell.exe being blocked but nothing on scan

Avast Free Antivirus / Premium Security
1

Hello,

I’m getting a popup from avast about powershell.exe. being blocked because it is infected with IDP.Generic - Command line detection.

A scan shows nothing and quarantining the file does not prevent further pop ups. Not sure how to proceed.

Alert Id is 2d33383ba93d/2023-06-06T16:10:09.323Z

Thank you!

2

Bump - is it the right forum? Thanks!

3

Hi,

2 years after this post that seems to have gotten ignored, I am facing this same issue. Has anyone found a solution?

Thank you!

4

Suggest you test the file at VirusTotal

if clean, submit a False Positive form to Avast using: Choose Your Sample Submission Type | Avast

It is also better to start a new thread than add to a 2 year old thread, even for same subject.

5

IDP is behavioral detection, so it won’t be detected by manual scannning nor Virustotal.

It just means the script you (or other software) were trying to run was considered suspicious; not powershell.exe itself if the exe is legitimate one.