Win32: evo-gen

[minotaur]

Hi! I have the same problem, only all of my Windows XP Pro system files seem to be infected. I use two hard drives with two separated systems (Win7 and XP Pro, not even any boot record recognizes the other), and the Win7 seems to be okay.

I just refreshed both the virus database and the software, and it's still coming up. I'm not sure if it's a mistake though. What is worse, WinXP tells me to use the original install disc to repair the files, because "necessary system files have been replaced with unrecognizable versions" or something like that, that may affect stability. I lost some programs too (like notepad.exe), I think those have been moved to quarantine. If I move to quarantine all the system files of WinXP I'm sure it won't ever start again, and I need that system. Repair didn't work. Any idea?

[kovac]

Hi minotaur,

please follow instructions written here: http://forum.avast.com/index.php?topic=53253.0 (on the Win XP of course). It is indeed very strange that so many system files of Windows XP are being flagged as infected. Does not look like a false positive to me, especially if Windows itself recognizes them as invalid. I also recommend you to start a separate thread, describe the problem and attach the required logs (see link above).

Good luck,
Peter

[utrobin]

Hi,

still having troubles with the files, could you please advice, what to do next?

Regards
Alex

[Bogarth]

Hi,

I have the same problem - Avast is showing Win32:Evo-gen [Susp] in almost all installation programs from www.jzk.pl (download from http://jzk.pl/pobierz) , supplier of software for small businness. Is it possible to chceck whether it is a serious threat or just a false allarm?

[Bogarth]

Still did not get any reply! Could anyone check whether the software from www.jzk.pl (download from http://jzk.pl/pobierz) is trustworthy??

[Pondus]

Still did not get any reply! Could anyone check

what to do is posted in reply #16

and any suspicious file can be uploaded an tested at www.virustotal.com  max 64mb
or at www.metascan-online.com   max 50mb

and false positives can be reported here   http://www.avast.com/contact-form.php

[jeffg1]

I have the same problem - Avast is showing Win32:Evo-gen [Susp] in almost all installation programs from www.jzk.pl (download from http://jzk.pl/pobierz) , supplier of software for small businness.

This is almost certainly a false positive. I am getting the same with files downloaded from my site (http://www.jeffg.co.uk). My programs are built using Microsoft Visual C++ in Visual Studio 2010. Someone else has the problem with programs built with Dev-C++. I have submitted a ticket but Avast seems to be doing nothing about this. Would be worth contacting the people at www.jzk.pl to find out what their programs are built with.

Edit: which programs from jzk.pl/pobierz show the problem? Because the first one I tried (Druczek Ultimate) was OK. I tried several others too, without a problem.

[darioendler]

In my case this is certainly a false positive and is giving me a huge headache.
I have a program written in C + + and I compile it using MinGW. AVAST thinks this program is contaminated with WIN:Eco-gen, and I'm pretty sure is not because it is my own program. It is part of my installation package and is causing problems in all my customers.
What I want to know is what I have to do in my source code for the AVAST do not identify it as a virus?

[Asyn]

1. In my case this is certainly a false positive and is giving me a huge headache.
2. What I want to know is what I have to do in my source code for the AVAST do not identify it as a virus?

1. You can report a possible FP here: http://www.avast.com/contact-form.php
2. Signing your program should help.

[Pondus]

What I want to know is what I have to do in my source code for the AVAST do not identify it as a virus?

it is not identified as a virus .... it is identified as Suspicious    Win32:Evo-gen [Susp]   

[REDACTED]

Hello I was trying to open utorrent and then I get this alert

and avast deleted my utorrent.exe
I download again utorrent and when I'm trying to install I still get the same alert



any help what I can do?

thanks

[Milos]

Hello,
can you send us detected the file, please? Use https://www.avast.com/false-positive-file-form.php and in "Description" mention link to this forum thread.

Thanks,
Milos

[REDACTED]

Hello,
can you send us detected the file, please? Use https://www.avast.com/false-positive-file-form.php and in "Description" mention link to this forum thread.

Thanks,
Milos

File sent!