Hi Rich,

assuming your installer does not contain Ransomware....<g> your setup seems to trigger a "false-positive". Upload your installer to Sophos and report it as false-positive so they can fix their bug in the next virus definition update.

BTW, is your installer code-signed?

Friedrich