I was having some odd behavior from my computer, so I had Avast! do a full system scan. I was mildly surprised to discover that it detected something in my GOG.com downloads folder, but I simply had it delete the Incoming & Incoming Forces setup file so I could re-download it. After re-downloading, however, I scanned the installer again and detected, once more, Malware-gen in senfly.ian. A google search for "senfly.ian" was completely unhelpful, so it doesn't look like this is a known false positive. Has GOG's server been compromised, or is this a false positive?

I'm seeing the same thing

Avast Antivirus is telling me the same thing as well. Has this Incoming setup file issue ever been resolved?

Still getting this issue as of today with current updated version of Avast virus scanner.

Has there been any answer found to this?

As much as I trust GoG, I don't see over-riding my virus scanner to be a good idea without some kind of assurance...

Try uploading this file here - https://www.virustotal.com/