I have been using LameXP for years. It is a very useful freeware tool. I decided to help the author evaluate beta versions and Avast has deemed them malware ‘Win32:Evo-gen [Susp]’. I submitted a report ticket but I have had no response from Avast:
29 November 2014 18:27
I downloaded from http://sourceforge.net/projects/lamexp/files/Snapshots (BETA)/ the LameXP-TEST.2014-11-29.zip
yesterday. I extracted the files and scanned both the zip and extracted files folders and avast found no threat. I opened the beta application and used it. This morning when I opened the same application Avast identified it as a virus and put it in the chest. I went to the chest and right clicked on the file and chose restore and add to exclusions. I attempted to fill out a false positive form but either ‘Lord Mulder’ or ‘Source Forge’ as publisher or ‘LameXP’ as program was deemed insufficiently informative and form refused to submit. This is a beta program distributed in a zip file which Avast on second thought has labelled Win32:Evo-gen {Susp}. I know what I am doing, I trust Lord Mulder even though he is too stubborn to change his zip program. Please check this folder from http://hivelocity.dl.sourceforge.net…mexp/Snapshots (BETA)/2014-11-29/LameXP-TEST.2014-11-29.zip :
LameXP-TEST.2014-11-29.zip < 16 hours ago 21.4 MB 66 weekly downloads i
SHA1:
09c3216a2decb4f0c980026015b5e0f97c4cf842
MD5:
aac1af01da9ba2ddbc9a76cf699ae70e
Downloads (All-Time):
6
If you agree it is not in fact malware please find a way to recognize the false positive and allow me to receive the folder and use the beta application.
One of the other persons supporting the development of the software suggests:
"…when LameXP starts it creates a temporary folder on your hard drive and extracts several applications into that folder.
One of those applications is called lxp_mpg123.exe and that’s probably the file that’s one of the reasons antivirus software may report it as virus.
That’s now the case with Avira and Ikarus as you can see here: https://www.virustotal.com/en/file/e...is/1417295691/ (virustotal report for lxp_mpg123.exe).
LameXP.exe itself is compressed with UPX, the same executable compressor that’s used in lxp_mpg123.exe
UPX is a legitimate compressor but the compression techniques it uses are often used in warez and trojans and dubious applications so it’s normal that some antivirus software will do a false positive from time to time. "
How do I get Avast to let me download and open these zip files with the beta test versions ? When I initially got one in which was moved to the virus chest I had it returned to the folder and exempted it from scanning. Avast has not let me take my chances with what I am sure is a false positive.