People has reported this quite a few times but every time nothing is come back about it actually being true.
As Moclam said really.
It's clean, some antiviruses give false threats because they can't find any information about who licensed the installer I think.
Just go onto the official downloads tab and download the game installer, then the patch installer. Install the game first, then the patch.