This may be helpful to you:
https://www.clamxav.com/BB/viewtopic.php?f=1&t=4085&p=22064
I'm tipping a false positive with a new definition update. If you haven't
already, I would update to the latest definitions via freshclam and look
again.
If you feel its a security issue, you can try a 'yum verify' after installing
the yum-plugin-verify package. This will check files installed on the system
versus the packaged files. If all that comes back good, then you should be
ok.
A supplemental check can easily be done by submitting your suspect file to
https://www.virustotal.com/en/.
ClamAV is giving rather often false positives, and some of then may stay
as such for long.
Best regards,
Iosif Fettich
