False virus alert

[Cassy TMW]

Hello everyone,

I'm a real noob to such things, so I hope I'm choosing the right words:

I'm getting a false detection of http://download.evolonline.org/manaplus/brokenantivirus/libgcc_s_sjlj-1.dll and therefore can't open a program (a client for an open source MMORPG) or update/reinstall it.
The programmer of this client asked me to report to you, so can you please look at this and give me/us a short feedback?

Thank you very much in advance! 

Cassy

[Pondus]

and what does the message say?

[Cassy TMW]

Only that avast found a damaging website or file.
If you need more information, please just tell me which and maybe where I can find it.



This was when I tried to download  it again (therefore ...firefox.exe).

[mchain]

Well, appears something is going on with your programmer's site, and not on your system:
http://urlquery.net/report.php?id=7315868
http://zulu.zscaler.com/submission/show/57411b45d56fcfa9ae4799cb612c89dc-1383157005
File here is detected by one a/v vendor.
https://www.virustotal.com/en/file/5ba372985be333f3d7576e6e8f53ee7c74da52453b4a22f5ed9517c37f1e335b/analysis/
Not blacklisted yet:
http://sitecheck.sucuri.net/results/download.evolonline.org/manaplus/brokenantivirus/libgcc_s_sjlj-1.dll

Screenshot of the toaster pop-up warning/block will help.

[EDIT:]  Not a well-known site according to WOT:  http://www.mywot.com/en/scorecard/download.evolonline.org?utm_source=addon&utm_content=contextmenu

Could you please change the link above to hxxp:// from the live one, http:?  This will help other users from possibly getting infected by unwittingly clicking the now live link.

[Pondus]

Win32:Evo-gen [susp] = Suspicious



You can upload files and report issues to avast  lab here: http://www.avast.com/contact-form.php  (change subject according to Your case)

you can use mail

send to virus@avast.com in a password protected zip file
mail subject:  False Positive / undetected sample (select subject according to your case)
zip password:  infected

or you can send files from avast chest
how to use the chest.   http://www.avast.com/faq.php?article=AVKB21

[Pondus]

file is also very new at VT so not strange that avast say suspicious

First submission 2013-10-30 16:45:29 UTC ( 1 hour, 40 minutes ago )