Win32:Evo-gen [Susp] - another false positive

Viruses and worms
1

Hi, I install legal: AUTODESK 3DS Max 2010 x32, virus detected via back-ground scanner when I open software…
Source of file is: C:\Program Files (x86)\Autodesk\3ds Max 2010\stdplugs\ATSMAX.gup
File NAME is: ATSMAX.gup
I scan directly in 3DS Max 2010 destination, and NO VIRUSES! ???
I again scan file: ATSMAX.gup and AGAIN NO VIR.
After start 3DS, again Avast pop-up warning virus, I recovery file from Virus Chest and upload that file in VirusTotal

This is results from VIRUSTOTAL:
first this is url of VirTotal: https://www.virustotal.com/hr/file/9285841db64427ae9a4bcc554d7bb890cad4511ed8907d49c91fdcb355099a72/analysis/1422048874/
this is hash code: SHA256: 9285841db64427ae9a4bcc554d7bb890cad4511ed8907d49c91fdcb355099a72
I see again in VirusTotal: NO THREADS FOUND

I also scan via VIRSCAN, and also nothing
http://www.virscan.org/scan/acc3e987d85767ae35efa2ab1d33bb11

This is link from my file: http://www.mediafire.com/download/do1sz9bhaam7519/ATSMax.zip
Soo, please give me advice or instruction what to do…

2

Win32:Evo-gen [Susp] = suspicious is a on access detection only and will not show in any scan

you can report it to avast lab here https://support.avast.com/ > avast virus lab

you can also send files from avast chest … right click file in chest and use the menu

3

Thanks Anyway…I just do that… :slight_smile: And wait for fix or update …I really need this software, 3DS Max 2010 can start without that but after sometimes I getting errors…

4

I too had this happen today… Hadn’t opened max for a few days… Im also interested if this is a false positive or something new is out there.

5

Just write the name of the file , maybe its possible that a false positive :slight_smile: … Give the name of the file that is suspicious , get it to VirusTotal to the scanning of that, and send the results here or feel free to open a new post about your file …Also go to 3DS MAX destination folder and scan again maybe it was false posititive… ???

6
and scan again maybe it was false posititive.
as aid above Win32:Evo-gen [[b]Susp[/b]] = [b]suspicious[/b] is a on access detection only and will not show in any scan

report it to avast lab here https://support.avast.com/ > avast virus lab