I've seen people examine files and they think its a virus/trojan/malware once they see one scanner detect it. Here's how you actually read it. AVs often detect packed, binded, or crypted files as "malware" (like the freesteam client). A lot of programs are packed so that they don't take up that much space on your HDD, so popular packers like UPX sometimes show up on AVs since malware also is packed and crypted. Whenever you see something is detected because of a "binder/packer/crypter", think about it. If it just is packed, disregard this because 99% of the time the AV is talking bullshit. Just keep a look out for "IRC", "Bot", and "Dropper". Otherwise, use your common sense to determine if it is infected or not.