Win32:Evo-gen [Susp] - false positive

[mrapi]

https://www.virustotal.com/en/file/08ffb38abd3b060d897f5c51726851dbe56def0a67523c37966c441e78e704a9/analysis/1404053633/

also sent by http://www.avast.com/contact-form.php

[jeffersonsant]

@mrapi post:21

https://www.virustotal.com/en/file/08ffb38abd3b060d897f5c51726851dbe56def0a67523c37966c441e78e704a9/analysis/1404053633/

also sent by http://www.avast.com/contact-form.php

Detection was fixed in next update.

[mrapi]

another one: https://www.virustotal.com/en/file/f2a2193c48777ad86db4665572d8a690009cdd433731b347cf53d9ac89adcbc8/analysis/1405337524/
sent also by http://www.avast.com/contact-form.php

[jeffersonsant]

@mrapi post:23

another one: https://www.virustotal.com/en/file/f2a2193c48777ad86db4665572d8a690009cdd433731b347cf53d9ac89adcbc8/analysis/1405337524/
sent also by http://www.avast.com/contact-form.php

the response of the analyst

@Milos

Hello,
file with sha256 F2A2193C48777AD86DB4665572D8A690009CDD433731B347CF53D9AC89ADCBC8 is not in our DB – this is because we don’t store .zip files (we unpack them immediately). Upload to VT unpacked file and I can check then.

Milos

[mrapi]

problem is back https://www.virustotal.com/en/file/410b36ff8e24462ea1b197ea1be720e78b728a1d84ab5c0c9a5d6cb89008cd61/analysis/1406192515/

also sent by http://www.avast.com/contact-form.php with this topic link

[jeffersonsant]

@mrapi post:25

problem is back https://www.virustotal.com/en/file/410b36ff8e24462ea1b197ea1be720e78b728a1d84ab5c0c9a5d6cb89008cd61/analysis/1406192515/

also sent by http://www.avast.com/contact-form.php with this topic link

delay to response
you are not receiving notification email

Reporting for virus analyst

[mrapi]

for me seems fixed,thanks

[jeffersonsant]

@mrapi post:27

for me seems fixed,thanks

thanks for confirmation. : )

[jeffersonsant]

@mrapi post:27

for me seems fixed,thanks

the response was sent to the author of detection

@Milos

Hello,
file 410b36ff8e24462ea1b197ea1be720e78b728a1d84ab5c0c9a5d6cb89008cd61 is not detected with latest VPS.

Milos

problem solved.

[mrapi]

Problems again: https://www.virustotal.com/en/file/3c99dc45057f82eea725a47e1bd8985cf8bf6539f8be5c19f3137e8852bd1a95/analysis/1407234932/
also sent by http://www.avast.com/contact-form.php
thanks!

[system]

@Frank2 post:14

Avast reported Win32:Evo-gen [susp] and blocked download/execution of the Western Digital MyCloud installer, downloaded from WD:
http://support.wd.com/product/download.asp?groupid=904&sid=207&lang=en

I am unable to use my device.

I have also submitted Ticket Ref # : [[061514-8589471]] to Western Digital.

Is this a false positive, or an actual infection?

I have also attempted to submit a ticket with the file attached, but after unsuccessful several tries I gave up.

Thanks,
Frank

I have a similar issue when trying to install Todoist (https://en.todoist.com/windows), a well-known, task mgt app. Reported to Todoist Support as well.

Anyone else experience this? Believe it’s a false positive but want to confirm prior to overriding at install.

Thanks…

[Pondus]

Believe it's a false positive but want to confirm prior to overriding at install.

to do that is very easy ..... upload suspicious file(s) and test at one of these places www.virustotal.com / www.metascan-online.com / www.jotti.org

like this
https://www.metascan-online.com/en/scanresult/file/094ba005f21643939c30338e96972865
https://www.virustotal.com/en/file/1147e57550246b80dee2b34db4ee584fae4ea61ec4ce0ddb017a0087b7250abe/analysis/1407267154/

First submission 2014-02-20 13:06:17 UTC ( 5 months, 2 weeks ago )

Copyright© Doist Ltd. 2013 Publisher Ist Productivity Ltd. Product Todoist File version 2.6.4.0 Description Todoist 2.6.4.0 Comments This installation was built with Inno Setup. Signature verification Signed file, verified signature Signing date 8:01 AM 2/19/2014

so now report it to avast so that they can correct

[jeffersonsant]

@mrapi post:30

Problems again: https://www.virustotal.com/en/file/3c99dc45057f82eea725a47e1bd8985cf8bf6539f8be5c19f3137e8852bd1a95/analysis/1407234932/
also sent by http://www.avast.com/contact-form.php
thanks!

Reporting for virus analyst

@Milos

If it was reported though contact form, than reporter will receive answer.

Milos

[mrapi]

Previous problem solved,now another file : https://www.virustotal.com/en/file/5ed3b04d10eca00317b27f20db95c837178d1816b95278e4477606cb214cf89a/analysis/1407908645/

also reported by http://www.avast.com/contact-form.php

[jeffersonsant]

@mrapi post:34

Previous problem solved,now another file : https://www.virustotal.com/en/file/5ed3b04d10eca00317b27f20db95c837178d1816b95278e4477606cb214cf89a/analysis/1407908645/

also reported by http://www.avast.com/contact-form.php

If we were to check the forum regularly
would not possible fix all problems
wait for the release of the next update
I hope it is fixed.

[mrapi]

new file : https://www.virustotal.com/en/file/047ee22a759dc7bf73dbfc26f2f745c4a70b021b001b79578c69fd26aef10810/analysis/1409235942/
sent also by : http://www.avast.com/contact-form.php

[mrapi]

still not fixed

[jeffersonsant]

@mrapi post:37

still not fixed

is the reply.

@Milos

Thanks for report. It will be fixed.
Milos

[mrapi]

new fp Win32:Evo-gen :
https://www.virustotal.com/en/file/84f1a1eb94001a28d84eda56cb400d9bff368dad8a0b2018fc198663886b96ff/analysis/1415779303/

also sent by av interface

[mrapi]

new fp Win32:Evo-gen :

https://www.virustotal.com/en/file/5f3b9c16ef535b17e8b3c13d0b0665b10f4a09deece36b5b69523f91fbf284bd/analysis/1419317571/

https://www.virustotal.com/en/file/50f0bca2673907a23cdd55bfe468368b2f756e3a8690fcf31346aded07684988/analysis/1419317689/
also sent by av interface