I downloaded 2.9.1 earlier, and have now started receiving:
High security alert!!!
The URL you requested was previously found to be infected.
URL = http://www.MyWebsiteAddress.com/
When trying to browse to the blog, or wp-admin areas.
Now, as of 4:00pm mst, I downloaded 2.9.1 again, but it's an empty archive.