If the file is stored on the folder where the application is installed, then it means it's being used. The OCX file provides access to controls in the application. It's also possible that this is false alarm given by your anti-malware application. However, if you have the setup package, remove the application then install it again and check for the presences of evolvectl.ocx in the installation folder. If it's there, then it means the malware application shows a false alarm about it. Contrary, delete the file and then start your main software.