Avast WEBforum

Other => Viruses and worms => Topic started by: JazzyFair on January 31, 2013, 05:22:07 AM

Title: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: JazzyFair on January 31, 2013, 05:22:07 AM

Hello

Today i was going to do one of my routine cleanups with SuperAntiSpyware and before i could download it my Avast web sheild blocked it
I Have used this site and program for over a year now for regular cleanup a so this has to be a false positive

here is the full Infection Report and Url for the infection
Infection Details
URL:   http://cdn.superantispyware.com/SUPERAntiSpyware.exe
Process:   C:\Program Files (x86)\Google\Chrome\App...
Infection:   Win32:Evo-gen [Susp]

sence i have recieved this notification i have run scans including

SuperAntiSpyware (which i luckily still had in my downloaded files)
MalawareBytes
And My Avast
And A Boot Time Scan with no infection

Each i ran twice and found no infection on my computer

ive already sent a false positive report to avast about this but can anyone else help?

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: true indian on January 31, 2013, 07:11:27 AM

New virus defs were released...update please  ;D

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: mike406 on January 31, 2013, 07:39:24 AM

I get this FP as well. My engine and definitions versions are current.

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: Amrynel on January 31, 2013, 07:52:31 AM

Also getting this same Web Shield warning with 130130-3 when attempting to install the latest Flash Player.

Blocked whether from Adobe or even Avast's own website (i.e. the link that comes up when you don't have Flash installed and you attempt to view the Web Shield Traffic History)!

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: JazzyFair on January 31, 2013, 07:56:25 AM

same for me everything is up to date they realy need to fix this issue

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: Manimecker on January 31, 2013, 08:16:21 AM

Same overhere, it also occurs when downloading anything from Microsoft (e.g. NetFramework).

Using lastest virus database...

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: Torxi on January 31, 2013, 08:45:58 AM

Hi,

got this notification on startup:

Infection Details
URL:   http://files.avast.com/files/emupdate/20121107.exe
Process:   C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Infection:   Win32:Evo-gen [Susp]

Is this false or should I be concerned?

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: Milos on January 31, 2013, 03:48:08 PM

It should be fixed.

Milos

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: Bill Harris on February 26, 2013, 07:13:38 AM

It hasn't. I'm having the same problem with products from Microsoft and compiled with Microsoft compilers.

Title: Re: False Positive Infection:Win32:Evo-gen [Susp] For SuperAntiSpyware Download???
Post by: spywar on February 26, 2013, 07:19:30 AM

Quote from: Bill Harris on February 26, 2013, 07:13:38 AM

It hasn't. I'm having the same problem with products from Microsoft and compiled with Microsoft compilers.

From what you say these are not the same files as mentioned previously (SAS).
Please submit them to "virus[AT]avast.com"with False Positive in the subject (make sure to compress them with a password like "infected") and maybe a link to your post in this topic.

spywar