virtualbox.org

I'm pretty sure that in past cases it was only necessary to manually delete all of the existing files in the "Oracle\VirtualBox\ExtensionPacks" folder, i.e. it was the renaming and replacing of files that was getting the AV software interested. Once the folder is empty the extpack installation usually proceeds smoothly - no need to unpack the tgz file.