IMO, "antivirus" software that takes the easy way out by flagging commonly abused software as more than merely a warning, is itself malware.
They should be looking for the virus/trojan itself, not the common software they use.
Sadly i found many other private clients from being infected by a bfgminer/cgminer/minerd instance
Hidden in a self starting proces called adobe, so it looks some botnet builders are using the miner to run them illegal
These unknowing customers have no clue that its not normal that their gpu is blazing like mad so they complain and ofcourse some specialist find that its caused by the secretly installed miners.
If this is done by people they know or by botnet owners or usage of illegal software i do not know.
Ofcourse some of them report their findings to the av companies, and to be honest even though its annoying they are right
But fact is that this causes all anti virus makers to flag the miners as nasty software.
Flag that, not the legit software it's abusing.