No viruses/trojans found after a tough checking. The distribution on the mirror site was just broken for an unknown reason. I extracted files from the distribution and except few broken ones they were genuine. You can ignore the AVG antivirus warning, it's a false alarm. Next time if you receive such a warning please tell me immediately. Verify the package signature regardless of the source you downloaded it from!