ORIGINAL: Harlan
It doesn't have to be the fault of AVG or aa actual threat (virus). It just has to look like a threat to whatever anti-virus program is running. If the guy who wrote the code is sloppy or just lousy at his job, it could set off the threat warning. In that case, its the fault of RCU management for not correcting it.
Harlan
Yep thats right, just not necessarily lousy. It probably functions just as it should but the programmer accidentally replicated something with a similar appearance and didn't know it.