Phishing alert

ok, if the file has permission 0 then the hosting guys probably blocked it in regards of your request. ClamAV doesnt modify attributes, it just alerts you of suspicious things.

If ClamAV is giving different results in different servers, you have to compare what versions of cPanel and ClamAV are running in both servers. They probably differ.

Will see what this hosting tech support is willing to do… I have sent them the same thing…

Not sure if these are reliable but the scan are clean!
https://www.virustotal.com/en/file/929a5a2c7d140406aac1ace313acf7bdcbec571f6e5fad4b9cd522d645b81dba/analysis/1393598775/
https://www.virustotal.com/en/file/d1307afedbe27990798097437ef0ac0551c0b1bdcb7b534d857860c4c009ec61/analysis/1393599053/
It even passed ClamAV

https://www.metascan-online.com/en/scanresult/file/4ccc04c66c5f4ee8b66a045a25da410d
https://www.metascan-online.com/en/scanresult/file/5586be6aeba8418bbdef486664178adc

Yes, that’s what David from infinitewp said. It’s a false positive. ClamAV must be outdated then. Report it to your hosting service.