You should be safe with any of the download sites, just make sure you're downloading JUST the DLL (Classic Chorus.DLL). If you get an executable, delete it, don't run it. AFAIK nobody's ever gone to the trouble of infecting a plugin with a virus, but there have been plenty that were wrapped in evil executables.