A skim of the Ren'Py code (at least in the Mac version) reveals nothing that looks unusual to me, so if there is a virus, it's probably in the wrapper code. Just run it with a clean copy of the Ren'Py engine and you should be fine. But it's probably a false positive.