Upload the moon-qt wallet executable file to virustotal and see the results for yourself.
It's infected with a polymorphic botnet, they often change their own signatures which is why they are only detected on a couple of AV engines before they'll morph so that they don't match the definitions anymore.

The link I posted was for the Kaspersky removal tool, worst it will do is run and tell you that you don't have the botnet....