+1 I've seen a few floating around and am unsure as to which is the real/authoritative version anymore.

As a detour to your point about a trojan - many AV products flag miners and even sometimes wallets as malware or unwanted software. Unfortunately we're operating in an environment where unless you're willing to download the source, do a full code review including knowing how to spot security vulnerabilities, you'll have to trust the tools. Miners are a control channel to your PC, to perform what is hopefully a known/limited set of operations (mining for coins). The reality is these tools can and have been compromised, I'd stick with the known good ones and not worry about a few mhs.