dgVoodoo2 has had problems with false positives for years.
Here are some more discussions:
https://www.gog.com/forum/blood_series/concerns_about_dgvoodoo_2_for_blood_2https://www.vogons.org/viewtopic.php?f=9...4fc13d8#p423067Short version is that dgvoodoo 2 is safe, but something about it triggers antivirus and produces false positives -- or claims things like "WS.Reputation.1" that aren't really a virus at all but are listed like one (and most users don't bother to look up what the description actually means). All "WS.Reputation.1" means is that the antivirus isn't familiar with the file, or it isn't a commonly used file. It's like saying some random person on the street is an axe murderer simply because you never met him before.
The dgVoodoo2 website is also safe -- far safer than most websites because it isn't full of scripting and transparent gifs that can install cr@pware behind your back. But since the dgVoodoo2 website hosts the dgVoodoo2 file, and certain purblind antivirus are reporting dgVoodoo2 as suspicious, the website gets an undeserved "unsafe" warning.
Consider that even games that are purchased and downloaded from websites like Steam and GOG have gotten virus warnings, even though they had no virus. People have had their game exe's deleted by antivirus.
If you think most antivirus actually test the files they're flagging, think again. Many years ago antivirus had some use by checking file signatures. But now there are virus designed to have a different signature every time they infect, or hide their signatures with encryption, so antivirus can't depend solely on file signatures. So now they guess, and they often guess wrong, especially for less well known files, like those meant to help play old games.