The biggest source of false positives is from the heuristic models the various AV products use.

Installers by there very nature are more likely to trip those.

A good strategy is to rescan with them turned off, so that if it does trip again, you know it's matching a specific virus signature (and so increases the likelyhood that you've got a true positive).