I'm not real good with virus info but I would say that its just part of the install process. I could be wrong. Maybe if you could paste the code from the script file here we could see how it works....