Win32:Evo-gen [Susp] - false positive

[REDACTED]

Avast reported Win32:Evo-gen [susp] and blocked download/execution of the Western Digital MyCloud installer, downloaded from WD:
 http://support.wd.com/product/download.asp?groupid=904&sid=207&lang=en

 I am unable to use my device.

I have also submitted Ticket Ref # : [[061514-8589471]] to Western Digital.

Is this a false positive, or an actual infection?

I have also attempted to submit a ticket with the file attached, but after unsuccessful several tries I gave up.

Thanks,
Frank

I have a similar issue when trying to install Todoist (https://en.todoist.com/windows), a well-known, task mgt app.  Reported to Todoist Support as well.

Anyone else experience this?  Believe it's a false positive but want to confirm prior to overriding at install.

Thanks...

[Pondus]

Believe it's a false positive but want to confirm prior to overriding at install.

to do that is very easy ..... upload suspicious file(s) and test at one of these places  www.virustotal.com / www.metascan-online.com / www.jotti.org

like this
https://www.metascan-online.com/en/scanresult/file/094ba005f21643939c30338e96972865
https://www.virustotal.com/en/file/1147e57550246b80dee2b34db4ee584fae4ea61ec4ce0ddb017a0087b7250abe/analysis/1407267154/

First submission 2014-02-20 13:06:17 UTC ( 5 months, 2 weeks ago )

Copyright© Doist Ltd. 2013
Publisher Ist Productivity Ltd.
Product Todoist
File version 2.6.4.0
Description Todoist 2.6.4.0
Comments This installation was built with Inno Setup.
Signature verification  Signed file, verified signature
Signing date 8:01 AM 2/19/2014

so now report it to avast so that they can correct   

[jefferson sant]

Problems again:  https://www.virustotal.com/en/file/3c99dc45057f82eea725a47e1bd8985cf8bf6539f8be5c19f3137e8852bd1a95/analysis/1407234932/
also sent by http://www.avast.com/contact-form.php
thanks!

Reporting for virus analyst

If it was reported though contact form, than reporter will receive answer.

Milos

[mrapi]

Previous problem solved,now another file : https://www.virustotal.com/en/file/5ed3b04d10eca00317b27f20db95c837178d1816b95278e4477606cb214cf89a/analysis/1407908645/

also reported by http://www.avast.com/contact-form.php

[jefferson sant]

Previous problem solved,now another file : https://www.virustotal.com/en/file/5ed3b04d10eca00317b27f20db95c837178d1816b95278e4477606cb214cf89a/analysis/1407908645/

also reported by http://www.avast.com/contact-form.php

If we were to check the forum regularly
would not possible  fix all problems
wait for the release of the next update
I hope it is fixed.

[mrapi]

new file : https://www.virustotal.com/en/file/047ee22a759dc7bf73dbfc26f2f745c4a70b021b001b79578c69fd26aef10810/analysis/1409235942/
sent also by : http://www.avast.com/contact-form.php

[mrapi]

still not fixed

[jefferson sant]

still not fixed

is the reply.

Thanks for report. It will be fixed.
Milos

[mrapi]

new fp Win32:Evo-gen :
https://www.virustotal.com/en/file/84f1a1eb94001a28d84eda56cb400d9bff368dad8a0b2018fc198663886b96ff/analysis/1415779303/

also sent by av interface

[mrapi]

new fp Win32:Evo-gen :

https://www.virustotal.com/en/file/5f3b9c16ef535b17e8b3c13d0b0665b10f4a09deece36b5b69523f91fbf284bd/analysis/1419317571/

https://www.virustotal.com/en/file/50f0bca2673907a23cdd55bfe468368b2f756e3a8690fcf31346aded07684988/analysis/1419317689/
also sent by av interface

[mrapi]

please fix that!!

[Pondus]

Report to avast lab here   https://support.avast.com

[mrapi]

https://www.virustotal.com/en/file/3f90d9cb593140274b980f6d29a04f03706808fa48b3cc1a095a8a0fb1018dc3/analysis/1420823169/

[mrapi]

https://www.virustotal.com/en/file/293520d6baf7a4961ef18717bb405f6707712ac64e8f64be22f7407a40cad516/analysis/1421937921/

[jefferson sant]

https://www.virustotal.com/en/file/3f90d9cb593140274b980f6d29a04f03706808fa48b3cc1a095a8a0fb1018dc3/analysis/1420823169/

https://www.virustotal.com/en/file/293520d6baf7a4961ef18717bb405f6707712ac64e8f64be22f7407a40cad516/analysis/1421937921/

Hello
I'm busy with some samples to be sent to detection of avast, as I have  not your files, VT (virus total)  distributed results are not feasible,I will attempt.