false positive ?

Avast Free Antivirus / Premium Security
1

http://i.imgur.com/kPwUN8s.png

i downloaded the latest rar archive from rar web

http://www.rarlab.com/download.htm

WinRAR x64 (64 bit) 5.30 beta 1

it cant be a virus right ? thanks

2

It’s definitely a false positive. You can send it to Avast Virus Lab from Virus Chest simply right click it and you will see an option saying Submit to virus lab… and then the application form appears and follow the instructions as mentioned here https://www.avast.com/en-nz/faq.php?article=AVKB21

3
it cant be a virus right ?
Avast detect it as suspicious...... Win32:Evo-gen [ [b]Susp[/b] ] = Suspicious

WinRAR x64 (64 bit) 5.30 beta 1 … maybe not so strange if file is new.
First submission 2015-07-30 10:20:20 UTC ( 2 days, 2 hours ago )
https://www.virustotal.com/en/file/37879c264ca3d22cbc0ea061b98f4f61ea20127718855c9a6f908bd7b9f24344/analysis/1438429802/

Symantec /Norton also think it is suspicious
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight

And next time, use Viruses and Worms forum section for reporting False Positives

4

This has been corrected now. No detections from Norton/Symantec. I also see Avast has been corrected. https://www.virustotal.com/en/file/37879c264ca3d22cbc0ea061b98f4f61ea20127718855c9a6f908bd7b9f24344/analysis/1438433674/

@prescient: I did a scan of this file with Avast had it didn’t detect any malware or as suspicious file.

5
No detections from Norton/Symantec.
I still see it ..... if you know where to look ;)
6

The link says no detection for Norton/Symantec. Oh well, must be time difference or something else? Glitch maybe? Maybe Norton is still developing a new malware definition to correct this detection? I even downloaded this file and did a scan by avast of this file. Avast says no detection?

7

“I still see it… if you know where to look ;)”. Oh well you the expert not me. If it still says so, then it is very true :slight_smile:

8

LOL pondus I see it. It’s under “Additional Information”… Finally am an expert already :stuck_out_tongue:

9
I also see Avast has been corrected.
Maybe / maybe not ..... it depends how the Win32:Evo-gen [ Susp ] was detected.

This used to be a on access detection only and was never visible on a VT scan, this has changed, since this is not visible on VT it could be a on access detection or it is fixed

10

There are many detections that will only be detected by the resident scanner and not the on-demand scanner. Since VT is only using on-demand scanning some might not show up/be detected.

Those detections which are checked against the avast cloud or by deepscreen or possibly HIPS detection, may not be seen/detected by on-demand scans.

11

i didnt want to download beta ::slight_smile:

12

This has nothing to do with this topic.

But to clarify, you get a beta build if you have downloaded and installed a beta version previously. Currently there is no beta trial/version in progress.

I suggest you start your own new topic and expand on your single sentence.

13

what are you talking about ?

this is my thread and i was commenting that the file i downloaded was beta … that is why it wasnt updated yet
when i first download it i though i better get the release one but then i installed the beta anyway
i dont like beta s/w anyway unless i have to

14

Exactly what it said, based solely on your post, which I quoted and replied to.

Your topic or not, I hadn’t got a clue what you were referring to avast or what, which is why I sought clarification.

15

so i can save you now
my eng language is under the lvl of normal communication sorry