Avast Internet Security
I just tried opening my Photoshop program. It is an old version of Photoshop I have been using a long time.
But a pop up from Avast came up and Win32:Evo-gen [Susp] is now in the Virus Chest
Am I allowed to open Photoshop again? Is it a real virus? Please advise steps.
Thank you
right click the file in chest and upload to avast lab as possible False Positive
it will then be sendt at next avast auto/manual update
Thank you Pondus
Am I supposed to stop using that program?
no… wait a couple of days, then right click the file in chest and rescan… if not detected, right click again and restore. a copy will remain in chest…this can be deleted when all is ok
Thank you again…may I ask …what will change in 2 days?
you sendt it to avast lab?.. if the detection is wrong they will fix it…remove detection
OH OK…many thanks Pondus for your fast response!
Over and over again. Why? When will this be fixed?
I cannot run Avast and Photoshop! I have restored only to be moved to the chest again. I have scanned. I have sent a false positive including the 0/46 report from Virus Total. Yet, Avast still moves Photoshop to the chest.
How long does it take to correct an error at Avast?
Thanks!
How long does it take to correct an error at Avast?usually quick.... when did you send it?
Pondus …seems someone else is posting in my thread …just wanted you to notice that was not me just now…but perhaps instructive that another is experiencing same photoshop issue?
Pondus sorry, but those Win32:Evo-gen[Susp] when scan in virus chest they automatically say " No virus ". It happened to me with the files I reported as F/P last week.
Yes Karen you have another member experiencing the same detection as you. it is normal for someone else to add to the thread.
@iroc9555
Pondus sorry, but those Win32:Evo-gen[Susp] when scan in virus chest they automatically say " No virus ". It happened to me with the files I reported as F/P last week.OK.... is it detected when you try to restore?
No, they are not being detected as this time. Yesterdays VPS seems to have fix the false alarm. BTW they were different files detections and not from photoshop. My adding to this thread was to make you aware that since these evo-gen files are suspisious they are not detected by a regular scann, but by FSS in real time.
Sorry Karen I don’t want to hijack your topic. Most surely it is a F/P and you have to:
Open Avast! > SECURITY > ANTIVIRUS > File System shield > Settings > Exclusion and add the path to the file that is being detected by Avast! this will exclude the file and it will not be detected that way you can send it to Virus total to be analized by 40 or more scanners.
https://www.virustotal.com/en/
Please paste the URL of the VT results here so that we can take a look at it.
Thank you iroc…it is good to have all the information possible and so I appreciate your taking time to help!
Pondus…do you agree with the advice to proceed as iroc advises?
will await to hear
You have to wait until tomorrow for Pondus to answer. He lives in Norway ;D You can leave the file in the virus chest for now. If you filled out the form to send it to Avast! lab, it will be sent automatically during the next VPS update.
Regards.
ok …many thanks iroc!
You are welcome.
BTW besides bebeNOTstupid above, here you have another member also complaining that Avast! detected photoshop:
And also ill adviced by phone support. Avast! does not like it when a Windows restore is performed >:(
Hello everybody,
I’m having the exact same problem. The executable file Photoshp.exe for Adobe Photoshop 6.01 (file created in Feb 20th, 2001) is being sent to the virus chest for this same reason.
Just added an exception and sent it to VirusTotal. It’s completely clean (result at https://www.virustotal.com/en/file/1ac997c0467ee978337b63f8cbc31ddf4ea9c3f50c09d042237ce3305d4b2cdc/analysis/1366337926/) and already sent a F/P notification.
I hope this situation can be solved as soon as possible. The program is on a quite old machine and I really need it…
Thanks in advance.
You must have a copy in the virus chest. Please right click on it and send it to avast! lab as a F/P.
I also have a similar problem with Photoshop and avast, but Avast did not put Photoshop in virus chest, but perhaps deleted the executable file. Chest remains empty. I had received avast warnings once in a while in the past, about a “suspicious program” but avast used to give the option to continue execution, so I was able to continue. I tried to add it to the list of exceptions, but this was never successful at any one session. Nevertheless, another try on another day, and I might not receive any warning. It was intermittent. The avast interface has changed, so I can’t see now where I tried to add it as an exception.
However, a few hours ago, while trying to open the program again, a warning came up, and it appears that Photoshp.exe was apparently simply deleted, after no problem a few hours earlier. I next tried uninstalling photoshop completely, then reinstalling from disk, which now fails [ComponentMoveData had the following error, Media Name: DATA, Component: Uninstall DLL, error number: -103].
I had a backup on another drive, so I next tried simply copying the executable folder from my backup. That too receives a “suspicious file blocked” but so far it does not appear to have deleted the executable from my backup folder. “The threat was detected and blocked when the file was created or modified.” It gives the option to “Add the file to the scan exclusion list,” but now I’m concerned, if it even did work now. I’d be glad to forward the file (how?). I’m hoping any answer here also answers my problem.