Possible virus downloading GNUCash 2.6.2 for Mac (Intel)?

[Mike or Penny Novack]

ALL antivirus software will either sometimes report a false positive or 
sometimes fail to identify a virus.

That is not a "state of the art" matter but a theoretical matter. You 
can prove that a perfect virus detecting program is impossible the same 
way you prove "The Fundamental Theorem of Computation". Just substitute 
in the constructed program that leads to the contradiction "will act 
like a virus" for "will loop".

In practice, false positives are better than missing a virus.

Michael