The usability if an infected file is found while downloading should be improved.
Btw: the problem was to install the scan-driver for Epson CX6400 in german for WinXP. Avast reports "evo-gen(susp)" at the moment the download has come to it's end; and what happens seems to be not what ought to be ...
As soon as download is finished, avast pops up telling "evo-gen(susp)" found (that's obviously a false alarm - see below). You get the option to EITHER report it as false alarm OR add it to the exceptions. WHY NOT BOTH?
If you declare it as exception, you can't repeat the download action - as again the same file is treated as threat (evo-gen(susp)), even if exactly that file is mentioned in the exceptions. Btw: the file is residing inside the "Temporary Internet Folder/Contents.IE5/... and has a [1] before the dot for the suffix. At the moment it is moved to the target directory, the [1] is omitted an the file get's it's name to appear with (epson28015eu[1].exe gets epson28015eu.exe).
The thing is that if you scan that file with avast (update was done some minutes before downloading - so everything is latest version), nothing is found.
So topic here IS NOT that false alarm file, but how avast deals with downloaded files (do in once both report as fals alarm AND add as exception).
And the different heuristic strength at end of downloading (compared to direct scan) is just another flaw.
Btw: MSIE tells asks whether to cancel download or not - but if you say NO, the question just reappears - even after declaring the file as exception (access denied) ...
