The VMA files do not contain any virus or other “add-on” when they are build.
The Sourceforge.net servers used for the distribution are known to be reliable, they are used without problem by thousands of software.
Against you must be careful if you have downloaded the VMA on another site.
To be sure that your file has not been modified by a third party you can check the md5sum with the content of the file md5sum.txt available on the download page. More information.
The detection of a virus in a file is not an exact science. It may happen that the antivirus software find a resemblance to a known virus and gives an alert.
Below is a list of these alerts affecting the current version of the VMA.
In case you find a new one, please report it on http://www.ap-i.net/mantis/set_project.php?project_id=2
There is no know issue with the last available version.