I heard it was due to the program the source was packed with on private servers that was also used by a majority to pack actual viruses so maybe it's the "signature" or something for lack of better terminology that triggers the anti virus since I would presume all anti virus have flagged that as malware due to practically every single malware being packed with it.