[ QUOTE ]
This is the WinRAR installation file, not a .RAR file or its contents.
[/ QUOTE ]
Just to be safe, I think I'd uninstall WinRAR. Delete all of your WinRAR installation files. Go to
www.rarlab.com (official site) and download the latest version and reinstall. Its always good to have the latest versions of software anyways. Try running your scan again and see if it comes up as a "password eavesdrop".
While I believe you that its most likely a false positive, something seems odd. WinRAR is downloaded via a ton of "official sites" and could've easily been a phishing site depending on how you came across it. Its better to be safe then sorry especially for something that will only take 5 minutes.