I think the reason is because certain Anti-virus programs now identify AVA as a potential threat after the latest update. (I used AVG, so the message did appear for me the first time it happened).
He might have accidentally deleted it from anti-virus tools.