It's the image.dll. The library only processes image data. I'm looking into why a specialized library is being flagged as a virus.