You can get false triggers sometimes too. The Virus Scanners are looking for patterns and can be tripped up.
And some legit tools, do break security rules that can be caught by scanners. Depends on the source of where you got them from if you trust them.
They could be real and got on the phone the instant the phone went on the air hoping they would eventually make their way to a windows PC.
And just because it found them, doesn't mean they are active either.
HTC One (O.M.J's Usually)