antivirus software detect false positives
typically Windows does this with executables that lack signatures (ppl need to pay for that)