Be aware there might be lot’s of false alarms like " Win32:evo-gen [susp]" if the heuristic is set too strong.