1

Hi,

This morning I tried copying the java jdk7u55.exe from my external hard drive to my pen drive and got a win64 evo-gen warning on the destination drive. Avast said something about the file being changed. I scanned the source file and no threat appeared, so I tried the copy again and still got the threat.

Am I infected or is this a False Positive?

Cheers

Baz

Windows 8.1 64 pro

2

Test file at www.virustotal.com click new scan if tested before
Post link to scan result

3

Thanks Pondus,

I Will check tonight.

However one thing that does concern me is that the source file is clean but the threat is detected on the destination and removed. I was wondering if somehow the copy process is somehow infecting the file.

I will temporarily disable A/V and do the copy and check both the original and destination file.

Baz

4

Hi,

I tried submitting the file to virustotal but it is 128MB, the file in question is jdk-7u55-windows-x64.exe

The message I get suggest explorer.exe is the cause.

I disabled Avast and copied the file. I then ran an Avast scan on both the source and destination and it came up clean.
I have tried other pen drives and other USB ports but still the threat is detected.

I have tried copying other .exe files and no message is reported.

I have attached a screenshot of the message that avast is displaying.

Baz

5

Yet another case of heuristics being broken lately.

6

After my last post yesterday I ran a deep scan and a boot scan, nothing was found.

However, this morning the problem seems to have gone away…Hmmm