I’m getting the same behaviour on a self-extracting zipfile with 427-0. But checking the file against Dr Web gives a clean bill of health and none of the extracted files register as infected, just the archive.

Is this still a problem for you? Did you send a sample in to Alwil?

Regards
Luke