False positives https://wordpress.org/support/topic/mac-avast-unzip-impossible-due-to-malware?replies=3 Seen a few of these from Avast lately. Something is up their side...
If you're worried, compare your versions to the versions here which are clean: https://github.com/woothemes/woocommerce/tree/2.5.5