Here’s a couple of ‘pointers’...
If you are logged into your account, downloading from your downloadable content page, the chances of it being ‘positive’ result are very slim. The login is to a secure server operated by the company you purchased the item from. If it were truly infected, then everyone would be getting alerts for the same file, not random people with random files. Couple that with the fact that at least one common AV product is using a ‘reputation’ based ranking system for determining file ‘safety’. Also add in the fact that some AVs are very, very aggressive, these days.
All of that, combined, means that the likelihood of an actual infected file is low (not non-existent, but you’d probably have a better chance getting struck by lightning).
