Vaysoft, DRMsoft converters Win32:Malware-gen & the Win32:Evo-gen[Susp]

Viruses and worms
1

Good day. We are using a PPTX to EXE converter (Enterprise) from Vaysoft and DRMsoft PPTX to EXE Advanced Converter to distribute our Powerpoint shows to paid customers. The last 3 days we were inundated with calls from angry customers complaining that Avast deleted our products. They are demanding their money back. The customers don’t get the option to exclude the files as it gets deleted on opening. Our powerpoint shows are, or rather, were used in the South African Primary Schools and in the homes of the learners. Now nobody can use our product and with right are they not very happy. How can we fix this?? When trying to convert a PPTX to EXE (Using both Vaysoft and DRMsoft) Avast deletes the file immediately as soon as it is converted. Sometimes we get the Win32:Malware-gen and sometimes the Win32:Evo-gen [Susp] warning. We did a full system scan on various computers - all clean, We used a clean powerpoint show to convert, but Avast delete the file as soon as it is converted to an EXE. Please help!!

2
The customers don't get the option to exclude the files as it gets deleted on opening.
They sure have the option to exclude them (or the folder they are in). All that say they don't should spend some time to learn on how to do it. ;)

This seems to me like a false positive.
Two things can (should?) be done :
1]
Report it so that avast can change things.
https://blog.avast.com/tag/false-positive/
2]
Sign your files.

Some information on how/why things can be detected as Susp(icous):
https://blog.avast.com/2012/12/03/new-toy-research-lab/

3

The problem i have is that most of our users are kids between 6 and 12 years of age. The educational software are used in various schools in South Africa. I have over 100 different EXE files all converted PPTX powerpoint shows. Do i need to report each and every single file to Avast in order to get this sorted?? Excuse my ignorance but how do i sign the files and how will it help me?

4

Hello,
send us the detected file(s) using https://support.avast.com/ → Avast Virus Lab
if they are big, pack then to zip archive and upload to our ftp://ftp.avast.com/incoming/ and send the uploaded filename using https://support.avast.com/ → Avast Virus Lab

Thanks,
Milos

5

A pretty easy to understand tutorial on how to sign files:
http://blogs.msdn.com/b/winsdk/archive/2009/11/13/steps-to-sign-a-file-using-signtool-exe.aspx

6

Thank you Milos and Eddy. Will do!!