It may be false positive. AVs detect almost everything as a virus if it changes memory, especially hacks