Virus, or no virus?

[HareDeLune]

O.K., so I found this cool looking (to me, anyway) Ranger clothing mod that I'd like to try: http://www.nexusmods.com/oblivion/mods/36309/?tab=2&navtag=http%3A%2F%2Fwww.nexusmods.com%2Foblivion%2Fajax%2Fmodfiles%2F%3Fid%3D36309&pUp=1

It's an older mod, and the author seems to be long gone. Unlike most other mods, this one comes with it's own installer. When I tried to download it, I recieved a warning from my anti-virus program. The warning seemed to be for the installer only, and not any other part of the mod. I tried to find some way to remove the installer from the file (on my computer, not on the Nexus!), but such a thing is beyond my capabilities, so I created a post in the mod comments to warn others.

Today, I learned about the Nexus' new mod virus checker, so I thought I'd visit that mod again and see what kind of rating the Nexus is giving it now. It's flagged as safe on the page, so I checked the report, and my anti-virus program (Avast) was in the list that gave it the green light.

I then updated my comment to reflect this change in status, and tried to download the file again. Once more, my anti-virus program blocked it, saying it was "suspicious". I followed the link from the warning to this page: http://www.avast.com/en-us/lp-fr-virus-alert?p_ext=&utm_campaign=Virus_alert&utm_source=prg_fav_90_0&utm_medium=prg_systray&utm_content=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_vir=V2luMzI6RXZvLWdlbiBbU3VzcF0&p_prc=C:\Program%20Files%20%28x86%29\Mozilla%20Firefox\firefox.exe&p_obj=aHR0cDovL2ZzLTIubmV4dXNtb2RzLmNvbS9GUy9MaWJzL0NvbW1vbi9NYW5hZ2Vycy9Eb3dubG9hZHM_RG93bmxvYWQmbmlkPTEwMSZmaWQ9NzI5ODQmbmduPTR8NXxSZXZvaXRoJ3MgUmFuZ2VyIFNldFxSZXZvaXRoJ3MgUmFuZ2VyIFNldCAxLjAgSW5zdGFsbC5leGU&p_var=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_elm=7&p_lex=150&p_lid=en-us&p_lng=en&p_lqa=0&p_lqe=0&p_lst=0&p_lsu=24&p_pro=0&p_bld=cnet2011&p_vep=9&p_ves=0&p_vbd=2021&p_hid=2caca4d3-14aa-4930-87df-d173004ce092&p_ram=3947&p_cpu=-1.0

The virus is identified as Win32:Evo-gen [susp].

 

So what's going on? Am I getting a false positive? Is the file corrupt? Is the Nexus not recognising the virus?

I am running my anti-virus in normal mode, not lockdown mode. I don't really think it's the Nexus overlooking a virus, considering their method of verification; however, I don't want to rule out any possibility. Anyone else encounter a similar weirdness?