RXC.exe - Raster-XChange -FileRepMetagen Mal detected

Hi all

Newbie here.

I purchased and downloaded Raster-XChange by Tracker Software (perhaps not the best of names in the circumstances) website - tracker-software.com/product/raster-xchange in order to convert documents to images. The file downloads as RXC.zip and Avast scan reports no threat. When unzipped to RXC.exe Avast scan also reports no threat, but when RXC.exe is clicked to install, Avast File System Shield reports FileRepMetagen [Malware] and file is deleted.

Virus Total report here virustotal.com/uk/file/413a18336f1a58ebd5e9febbb7234e8afc78b78e2e81a32fd9a78cb8c1e1d53f/analysis/1414708181/

Would this be a false positive?

Any help or advice you can give will be much appreciated as having purchased Raster-XChange I would like to use it as long as it is safe of course.

I’ve seen somewhere on here that links to websites should not be clickable and not sure how to do that so I have simply removed http://www from the links above - hope that’s right??

Many thanks.

Yepp, False Positive First submission 2013-06-14 07:50:58 UTC ( 1 year, 4 months ago )

CopyrightCopyright © 2000-2012 Tracker Software Publisher Tracker Software Products (Canada) Ltd Product Raster-XChange File version 1.10.0060.0000 Description Raster-XChange Setup Comments This installation was built with Inno Setup. Signature verification Signed file, verified signature Signing date 6:21 PM 5/13/2013

You can report issues to avast here : http://www.avast.com/contact-form.php

You can use mail
send to virus@avast.com in a password protected zip file
mail subject: False Positive / undetected sample (select subject according to your case)
zip password: infected

or you can send files from avast chest
how to use the chest. http://www.avast.com/faq.php?article=AVKB21

That’s great, thanks for your help.

Next question then - how do I stop avast from detecting and deleting the file so I can install it?

Told you I was a newbie :slight_smile:

Report it to avast lab using one of the options above, then they will remove detection
You may give them a link to this topic also

Great. Thanks again.