https://www.reddit.com/r/elderscroll...rd3/?context=3
Just because there have been cases where a virus called RedShell.exe have been found at some point doesn't mean the current one is a virus as well.
I find the explanation from ZOS quite convincing.