An antivirus telling that something is malware does not necessarily mean that it is malicious. For example, they will often report that a keygen - which I've checked that literally does nothing else than display the generated key - is malicious because it can be used for piracy.