BTW, what you could try: the wupdate_ssl.exe source code is available. Recompile the .sbp project and code-sign it with your own certificate. Perhaps this will work around the false-positive flagging.

Friedrich