Due to the nature of emulators, sometimes Antivirus applications on your computer detect Citra as a virus. But it is a false positive. To avoid this from happening, you should disable your anti-virus software on your PC or make an exception for this one. Then, you can enable it back again once the download is completed.