five-server icon indicating copy to clipboard operation
five-server copied to clipboard

Antivirus Security Warning: Powershell Threat

Open Lezreth opened this issue 1 year ago • 2 comments

Every time five-server is activated, avg pops up the following security warning:

Threat secured

We've blocked powershell.exe because it was infected with IDP.HELU.PSE36 - Command line detection

Threat name: IDP.HELU.PSE39 - Command line detection Process: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Detected by: Behavior Shield Status: Blocked

Lezreth avatar Aug 02 '23 13:08 Lezreth

I guess you can just ignore it.

To be sure, upload your powershell.exe file from C:\Windows\System32\WindowsPowerShell\v1.0 to https://www.virustotal.com/gui/home/upload.

Here you will find more about this issue with AVG:

  • https://support.avg.com/answers?id=9065p0000000mAbAAI
  • https://support.avg.com/answers?id=9065p0000000mvtAAA

As a disclaimer, I don't know your system and can therefore only make assumptions. But personally I think it is just a false positive.

yandeu avatar Aug 02 '23 15:08 yandeu

Every time five-server is activated, avg pops up the following security warning:

Threat secured

We've blocked powershell.exe because it was infected with IDP.HELU.PSE36 - Command line detection

Threat name: IDP.HELU.PSE39 - Command line detection Process: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Detected by: Behavior Shield Status: Blocked

Same issue here, Avast Command Line Detection

Error-Cezar avatar Nov 30 '23 10:11 Error-Cezar