Virus reports as Win32:evo-gen (Susp) in Avast
since posting yes I have tested the file at Virustotal.com
it comes up with one detection from VBA32 for backdoor.prorat
I am now assuming my machine is compromised