Jump to content

Avast just removed my Emby Theater - flagging IDP.ALEXA.53


Daithi

Recommended Posts

Just did a reboot of my system, noticed Emby Server and Avast Antivirus (Free version) updated and all of a sudden my Emby Theater install has disappeared, It seems Avast has flagged Emby.Theater.exe for the IDP.ALEXA.53 threat. Assuming it's a false positive but I'm unable to either restore the file using Avast and reinstall attempts keep failing. Figured I should check here to see if anyone else is seeing this behaviour on the off chance there is an actual problem here before I turn off Avast to get install done and add exceptions etc.  

Edited by Daithi
Link to comment
Share on other sites

35 minutes ago, Luke said:

Hi, have you tried installing Theater again from the website, on top of your existing version?

Hi Luke, yep, tried that, install kept crashing. Did another reboot and that time install worked (though didn't complete gracefully, crashed again but I have a working Theater app again and have now added an exception in Avast for Emby.Theater.exe - all seems fine so far).

Thanks

Link to comment
Share on other sites

40 minutes ago, Luke said:

@Daithi can you try installing the new 3.0.18 release and let us know how that compares? Thanks !

Sorry Luke, I didn't see your previous reply till now. Anyway, tried 3.0.18 and theater exe gets quarantined again, but not for IDP.ALEXA.53 - this time it was for IDP.HEUR.26 (Avast version is now 22.12.6044 and virus def is 221206-4)

Link to comment
Share on other sites

11 hours ago, Daithi said:

Sorry Luke, I didn't see your previous reply till now. Anyway, tried 3.0.18 and theater exe gets quarantined again, but not for IDP.ALEXA.53 - this time it was for IDP.HEUR.26 (Avast version is now 22.12.6044 and virus def is 221206-4)

Which exe exactly?

Emby.Theater.exe ?

image.png.d1183302735db170533262827262bdfe.png

 

Can you upload to https://www.virustotal.com/ and post the link?

 

Link to comment
Share on other sites

11 hours ago, Daithi said:

Tried 3.0.19 release, will not install without creating an exception in Avast first - this time the threat identified was back to IDP.ALEXA.53.

@softworkz https://www.virustotal.com/gui/file/3144b653df715ae2255c47595c4bebe82ed2dc52e937da734879a25c12719fb6

But that doesn't show any detection from Avast...

There are often 2 or 3 on virustotal that show some false detections, that's nothing to worry about. 

So, back to Avast - what exactly is it detecting locally? The exe or some other file?

Link to comment
Share on other sites

4 hours ago, softworkz said:

But that doesn't show any detection from Avast...

There are often 2 or 3 on virustotal that show some false detections, that's nothing to worry about. 

So, back to Avast - what exactly is it detecting locally? The exe or some other file?

Yeah, I noticed that, don't know what to tell you (never knew about that site before now).

Avast (free version with default settings) is trying to quarantine Emby.Theater.exe from AppData\Roaming\Emby-Theater\system due to IDP.ALEXA.53 - so without an exception I obviously can't run the app, nor can I install a new version.

image.png.cb126c2dbb7fef62877241db6e35d1f1.png

Link to comment
Share on other sites

FWIW, I'm satisfied with current situation, happy to leave exception in if this is a false detection. I can try any private builds you need if you want to clear this for any new users, feel free to @ me.

Link to comment
Share on other sites

On 12/11/2022 at 3:08 AM, Daithi said:

Yeah, I noticed that, don't know what to tell you (never knew about that site before now).

Avast (free version with default settings) is trying to quarantine Emby.Theater.exe from AppData\Roaming\Emby-Theater\system due to IDP.ALEXA.53 - so without an exception I obviously can't run the app, nor can I install a new version.

image.png.cb126c2dbb7fef62877241db6e35d1f1.png

@Daithi Could you please to the following:

  1. Update your Avast virus database. Please see this guide: Updating Avast Antivirus
  2. Take a screenshot of the Avast detection dialog (Threat Secured pop-up with See details - displayed at the bottom).
  3. Take a screenshot of the Avast virus database (open Avast Antivirus and go to Menu > About).

For instructions on taking a screenshot, refer to this article: Creating a screenshot

Link to comment
Share on other sites

Response from Avast Support

The reported file was checked by Avast virus specialists and based on the findings the detection was removed. The file is now marked as clean in the Avast virus database. This change may take up to 24 hours to take full effect. Please accept my apology for the inconvenience caused.

Edited by softworkz
  • Like 3
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...