[IAmBabyFinn]

Hello
I am writing Realy simple code for spreading purpose. Its coded in C#
The only purpose of the code is to bybass virustotal.
If you wonder how i did it You can find it here :
hackforums(dot)net/showthread.php?tid=5040149&page=4

But theres a big fucking problem .
Antivirus called Qihoo Detectes Almoust everything
it has detected my download and other programs .
It finds my code : HEUR/QVM03.0.Malware.Gen
scan : virustotal(dot)com/et/file/f4dfbe7fced3e5069b99a3bf4c75d68dc9e93d80114f680ce6fa4c3bf476c90c/analysis/

My code is pretty simple
1. Looks if the running machine Could be VM
2. Uncrypts stub using BASE 64 and command called certutil
3. Runs My stub and Displays my fake program error

Basicaly What triggers that detection?
Heres My Code and some screenshots.
pastebin(dot)com/5QuVwv10
gyazo(dot)com/4b9c1d03bceae5074e82651407fcf2ef

Things i have tried :
Removing the anti virustotal code
Writing junk code (ALOT)
Tryng Other Icons or no icon
Building it in other Compiler Such as SharpDevelop

If you Could Help Me With this one I Would Be so Happy