probarbly just false positive.

i have a collection of demoscene-files. Tiny files, just 64 kilobytes, and when you start the file it unpacks itself, it contains its own synthesizer and 3d graphics engine, and you get to see awesome 3d animations with awesome music. Almost every antivirus program hates these files, because of the extreme compression, and because many of them are programmed directly in assembler.

on the other hand, there are programs that allow you to create your own trojan horse or worm, you can decide which specific rootkit to use and which functionality it should have and how the file is supposed to look like and which operating systems it should target. If done correctly, almost every antivirus-program either misses it completely, or is too weak to stop it.

bottom line: most antivirus-programs are useless nonsense. They just dont do much. i cannot recommend one because i do not know one that doesnt get crippled or deactivated when you catch a real worm or trojan horse.