nsi script called 'AutoBackup' for keeping a backup of the entire project inside the project himself. That leaves one possibilty, the compiled NSI script. I have searched this board and found no false alerts regarding version 1.1g (well none for any version actually!), so its most likely that the 1.19 bootstrap/header is not the cause. Also the packaged files in the intaller (after compression) would not likely cause the false trigger as the virus is detected in both the installer and uninstaller by NOD32.
The files inside the package are definately not to blame as they are just a series of text files once installed (and they pass all scans once decompressed). NOD32 Virus scanner (from identifies the virus in both the installer and uninstaller, however Norton Antivirus does not.
Some guy reckons that a package put together with NSIS (which was downloaded from a highly-visited site) contains a virus (Win32/DelAll). Heres another situation where it would come in handy:
