Okay here's the bottom line. Your code is suspicious that's why these virus scanners are warning us. Just think of it this way. You walk down the street and see the sign "Blood and Crips Territory, Dangerous, Possible chance of losing your life.." would you continue to use that road or would you heed the warning.
If there's a way to remove the suspicious code, why don't you do it before packaging it for miners.
Just replace the two files that are being tagged, libcurl-4.dll and pthreadGC2.dll, and then all is clean.
A simple google search will get you both files from a dll-files website. But, again, you should also test those files.
I replaced both files and ran the phenixcoin-qt with no problem.
I was going to replace the files and zip it up to post, but hey, why trust a file I post up.