Thank you for letting us know, Smill.
We recommend you upload the URL to our website for false-positive analysis. Submit the request using the following link: https://www.avg.com/en-us/false-positive-file-form Our developers will check and get back to you soon. Your patience is much appreciated.
Hi Smill,
We're glad to look into this & help you.
Please let us know the version of AVG that is installed on your computer (Open AVG - Menu - About).
Also, share us the screenshot of the notification that you receive from AVG, after clicking on 'See details' in it for better clarity.
When the computer boots up, an AVG window appears, in which it is written that the UNINSTALLEXCHANGE.PS1 file was blocked, since it was infected with IDP.ALEXA.53. The file is located in the E:\Program Files\AVG\Antivirus\ Setup\UNINSTALLEXCHANGE.PS1 directory and is called by the PowerShell process, which in turn creates a new conhost.exe process. No software has been installed lately, but the last thing that happened to the computer was an AVG update. Is this a real virus or a false alarm?
Image drop is buggy so I uploaded in imgur Imgur: The magic of the Internet
Version 21.3.3174 build 21.2.6096.651
Yes, I'm updated virus defintions and alerts disappeared, but I looked into directory of alert and doesn't found any *.ps1 file. This is normal?
Appreciate your efforts in sharing us the screenshot, Smill.
As the provided screenshot isn't in English, would you be so kind to let us know the AVG component that has detected the file?
It will be listed below the file path in the threat notifictaion.
Component is AVG Behavior Shield.