Maybe the virus writer stole code from this (non-destructive) project that you have downloaded, and the signitures made by AVG pick that similarity up and adopt a "better-safe-than-sorry" strategy"
Originally posted by blackrat364
AVG is pretty nice. Less than a 6mb d/l, try it out.
I can't give you a link because I downloaded it a long time ago, but I know it was from Planetsourcecode. I was downloading things off of there to learn how to do 3D effects and such, and was sticking them all in a directory. I also downloaded things like how to do the "plasma" effect that was popular when that was still a strain on the CPU. If you look at the first link, that is exactly what that virus does. It was saved in a zip file in the directory from planetsourcecode. It was a DOS program and I never ran it, so it's obvious that it didn't copy itself there somehow - would have been quite the random directory for it anyway. So, I can't prove it, and I've deleted the virus, but I know it came from planetsourcecode.