False Positive?

system · 2014-07-18T14:08:15.000Z

This morning Avast warned me that my DCService.exe might be infected by Win32:Evo-gen. I uploaded and scanned it on Virustotal and they said the detection ratio was 0/51. Is this a false positive?

Here is Virustotal link:
https://www.virustotal.com/en/file/110113372f080e5bfd740c06f30dea0b75996b126899f22f0d33c85d3dce97d6/analysis/1405690803/

Pondus · 2014-07-18T14:10:44.000Z

yepp First submission 2011-02-05 13:13:35 UTC ( 3 years, 5 months ago )

Win32:Evo-gen [susp] = suspicious / a on access detection only so will not show on VT or when scanning

Pondus · 2014-07-18T14:11:43.000Z

You can report it using one of these options…you may add a link to this topic in case they reply here

You can upload files and report issues to avast here : http://www.avast.com/contact-form.php (select subject according to Your case)

You can use mail
send to virus@avast.com in a password protected zip file
mail subject: False Positive / undetected sample (select subject according to your case)
zip password: infected

or you can send files from avast chest
how to use the chest. http://www.avast.com/faq.php?article=AVKB21

LesF · 2014-07-22T12:12:47.000Z

What am I supposed to do about this? When I build my C# app Avast reports win32:evo-gen in the .exe and deletes it.
I set it to exclude my project directory and built the .exe, but now Avast is blocking my creation of an installer which includes the .exe, so I cannot get a serious bug-fix release out. If I set Avast to exclude the installer creation files, I could create the installer, but I cannot put this online for people to use if Avast is throwing up alerts about it.

This sucks. I need to get this software release out.

Pondus · 2014-07-22T12:53:18.000Z

What am I supposed to do about this?

report it using one of the options given above.....

LesF · 2014-07-22T13:11:56.000Z

Thats just strange. By commenting out a couple of lines of code, I can build my C# app and Avast is ok with it.
Unfortunately I really wanted those lines in there - just a minimum height check on a Windows control on my form.
Anyways, have posted a copy of the file with a false positive report.

Announcements