Might be 1337 too. My cpu has been throttling for awhile and trying to isolate the issue. Rubit had too many flagged virus from virustotal so I used an exchange instead. I only install 99% of the wallets that are clean from virustotal.
I don't have the answer but want to say that virustotal can miss things. Use a VM unless you trust the software 100%
Or use sandbox with process explorer, sometimes is even better then using a virtual machine (some viruses have part of the code made for stop the execution if launched in a virtual machine)