Navigation

    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Users
    • Groups
    • Rules
    • Help

    Do more on the web, with a fast and secure browser!

    Download Opera browser with:

    • built-in ad blocker
    • battery saver
    • free VPN
    Download Opera

    [Solved]Opera auto-updater flagged by Avast - false positive?

    Opera for Windows
    4
    6
    699
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • schikaneder
      schikaneder last edited by

      Hello,
      Wasn't using Opera, but its auto-updater and Installer got flagged by Avast file detection system as 'suspicious'. Opened Opera later and it updated itself when I clicked "About Opera". Here's the reported detection by Avast.. Can anyone confirm that this is a false positive?:

      "C:\Windows\Temp\Opera_installer_2017422425122.dll [L] Win32:Evo-gen [Susp] (0)
      C:\Windows\Temp\opera autoupdate\Opera_installer_2017422654251.dll [L] Win32:Evo-gen [Susp] (0)"

      Reply Quote 0
        1 Reply Last reply
      • donq
        donq last edited by

        Upload this dll into virustotal.com and if it has less than 5-10 hits, then it is certainly false positive.

        Reply Quote 0
          1 Reply Last reply
        • sgunhouse
          sgunhouse Moderator Volunteer last edited by

          Suspicious is not an actual positive ...

          If they mark something as "suspicious" that means they think it is acting like a virus would, and any background updater looks the same as a "file dropper" (the part of a virus that downloads the rest of it). So nothing unusual there.

          Reply Quote 0
            1 Reply Last reply
          • schikaneder
            schikaneder last edited by

            Thanks for the replies.. however, the temp files flagged by Avast disappeared afterwards (and they were not quarantined), so there's nothing to upload to VT. Is that normal for temporary files during Opera update process?

            Reply Quote 0
              1 Reply Last reply
            • Deleted User
              Deleted User last edited by

              @schikaneder

              Is that normal for temporary files during Opera update process?

              Yes.

              Win32:Evo-gen sounds alarming but appears to be a codename used exclusively by Avast. It does not indicate a ‘positive’ in any way and only informs you of possible malicious behaviour of a program.

              Without being able to analyse the file or knowing the file hash, no one would be able to give you a concise answer.

              Opera uses a similar naming convention for files saved to that folder. After updating, the update files are removed which matches your story.

              Reply Quote 0
                1 Reply Last reply
              • schikaneder
                schikaneder last edited by

                @tufuzay Thanks 🙂 I did report this as a likely false positive to Avast.

                Reply Quote 0
                  1 Reply Last reply
                • First post
                  Last post

                Computer browsers

                • Opera for Windows
                • Opera for Mac
                • Opera for Linux
                • Opera beta version
                • Opera USB

                Mobile browsers

                • Opera for Android
                • Opera Mini
                • Opera Touch
                • Opera for basic phones

                • Add-ons
                • Opera account
                • Wallpapers
                • Opera Ads

                • Help & support
                • Opera blogs
                • Opera forums
                • Dev.Opera

                • Security
                • Privacy
                • Cookies Policy
                • EULA
                • Terms of Service

                • About Opera
                • Press info
                • Jobs
                • Investors
                • Become a partner
                • Contact us

                Follow Opera

                • Opera - Facebook
                • Opera - Twitter
                • Opera - YouTube
                • Opera - LinkedIn
                • Opera - Instagram

                © Opera Software 1995-