Pajama: I do agree with what you're saying but according to GOG "if the results are inconsistent (as in, different scanners show different results), this
practically proves that it's a false positive." (My highlight). The trouble is that the 9 results are all different which does strongly suggest that it is indeed a false positive but it is a worry that GOG doesn't categorically say that the file is 100% clean. For what it's worth I think it is but GOG do need to do more about problems like this. Like you say, it really shouldn't be down to the customer to report this to the anti-virus manufacturer.
In my experience with false positives, most times there is just one scanner, which reports such a file. I had this issue a few times with some odd tools for electronics
On the other hand: I reportet a new screen locker virus to Avira, and it took a whole week, for just 10% of all scanners on virustotal to recognize this file. The companies seem to share signatures, but slowly. Which is why I dont buy security software anymore, its more or less pointless.
If virustotal has 9 positives, its a very bad sign.
To be clear: I dont claim, that gog intentionally ships infected files, or that they dont care about customer safety. But gog has a lot of games which they receive from a lot of different vendors. Its just a matter of time, until one of them makes a mistake. If the virus is not recognized by the tools gog uses, then thats it.
I will wait a few days for an update, but if nothing happens, I will ask for a refund. The first time in my case.