http://bugs.winehq.org/show_bug.cgi?id=34092
--- Comment #6 from Dmitry Timoshkov dmitry@baikal.ru 2013-07-21 20:46:16 CDT --- (In reply to comment #5)
I uploaded the fake iexplore I built myself. Sure, it's not malware. We just have to convince the antivirus makers to realize that.
One more question: is that a 64-bit PE? Currently winebuild generates 32-bit x86 entry point code for fake PEs (including 'ret' statement, which is supposed to pop correct number of bytes off the stack), perhaps that makes anti-virus checker unhappy.