Not really a surprise or really a false positive, you are downloading virus signatures, which would appear to be unencrypted and you have installed a resident anti-virus just looking for said virus signatures.
A bit like an attack dog biting a burglar.