Add AV false positive Q/A to FAQ

* Make sure users didn't install a dodgy copy.
* Inform users about false positives & what they can do about them.
* Assuage users' remaining suspicions by pointing to source & VT.

docs/help/LOOT-FAQs.html

@@ -38,6 +38,7 @@ title: FAQs
   <li><a href="#line-breaks">When LOOT updates the load order, it removes line breaks from <code>plugins.txt</code> and <code>loadorder.txt</code>. Won't this break something?</a></li>
   <li><a href="#proxy">I'm using a proxy to connect to the Internet. How do I configure LOOT's masterlist updater to use it?</a></li>
   <li><a href="#tls">I'm on Windows 7 and get an error whenever I try to update the masterlist. How do I fix this?</a></li>
+  <li><a href="#antivirus">My antivirus software detects LOOT as malware. What should I do?</a></li>
 </ol>
 
 <h3>Moving From BOSS</h3>
@@ -172,4 +173,13 @@ title: FAQs
     <p>This is an issue that affects many programs on Windows 7 because on the 22nd of February 2018, GitHub disabled support for connections using a version of TLS older than 1.2, and Windows 7 doesn't support TLS 1.2 by default.</p>
     <p>Windows 7 users must ensure they have the latest Windows updates, and that they have <a href="https://support.microsoft.com/en-us/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-a-default-secure-protocols-in">enabled TLS 1.2 support</a>.</p>
   </dd>
+
+  <dt id="antivirus">My antivirus software detects LOOT as malware. What should I do?</dt>
+  <dd>
+    <p>First of all, double-check that you've downloaded LOOT from an official source (i.e., <a href="https://github.com/loot/loot/releases/latest">GitHub</a> or <a href="https://www.nexusmods.com/skyrimspecialedition/mods/1918">Nexus Mods</a>). If you downloaded it from anywhere else, the provider may have introduced some form of malware to the installer or package.</p>
+
+    <p>If you have downloaded it from an official source, some antivirus software will mistakenly report new releases of LOOT as malware. False positives for new releases are fairly commonplace among antivirus software; just report the flagged executable as a false positive to your antivirus software and/or whitelist it to continue using it.</p>
+
+    <p>If you're still suspicious of LOOT, it's an open-source program, so you can review its source code on <a href="https://github.com/loot/loot">GitHub</a> and build it yourself. There is also a link to a VirusTotal report for new releases next to each download at LOOT's Nexus Mods page.</p>
+  </dd>
 </dl>