how did you run an anti virus scan on a webhost, but anyway, clam is shit + if someone is serious about infecting a website, a) if it WAS the type of file to be detected by anti virus, they'd have crypted it, and b) it would be more likely to be some sort of browser exploit pack which are usually undetected cause they're private