Win32 evo-gen susp - False Positive?

system · 2015-08-13T07:45:51.000Z

Hi, I was transferring some folders onto an external hard drive and in the middle of it, I got an Avast! pop up message saying it blocked a harmful webpage or file.

I’ve seen some people say this detection could be a false positive about a file on your computer, but in my particular case it lists a URL, so does this mean it really did block something on the internet that isn’t already on my computer?

I’d like to know if the infection was on my computer (and a false positive?) or on the internet and therefore not on my computer at all, because I don’t want to put an infected file onto the hard drive.

Thanks!

The URL went like: r7—sn-uxanug(etc)(.)com/chrome/edgedl/chrome/win/7(more numbers)
Infection: Win32:Evo-gen [Susp]
Process: C:\Windows\System32\svchost.exe

Pondus · 2015-08-13T08:33:37.000Z

Win32:Evo-gen [Susp] = suspicious … and to my knowledge this detection is only for file and not url

if you have not rebooted, right click avast tray icon and select show last popup … in top right corner is a pin so you can pin it to the screen if needed
take a screenshot and post here

kevrianate · 2015-08-17T12:32:14.000Z

I just received this for python.exe version 25. Virustotal is only showing Avast as detecting anything for this file.

Asyn · 2015-08-17T12:39:25.000Z

You can report a possible FP here: https://www.avast.com/contact-us.php?subject=VIRUS-FILE

kevrianate · 2015-08-17T13:13:44.000Z

Done, thanks for the link.

Asyn · 2015-08-17T13:19:51.000Z

You’re welcome.

Announcements