Is Cygwin Setup, or one of the packages, infected with a virus?
Unlikely. Unless you can confirm it, please don’t report it to the mailing list. Anti-virus products have been known to detect false positives when extracting compressed tar archives. If this causes problems for you, consider disabling your anti-virus software when running setup. Read the next entry for a fairly safe way to do this.