ClamWin identifies KeeForm.exe and KeeRun.exe as being infected with Worm.Sohanad.
These KeePass Password Safe programs use AutoIT so I suspect these are false positives.
Can anyone confirm?

This is indeed a false positive.

The signature that recognizes these two files is the following: 174080:1ba9e9486c1ed8d42af0af2bf4d20f8f:Worm.Sohanad
This is a section based MD5 hash. Unfortunately Auto-It script executables are identical with the exception of an embedded resource where the script is stored.

I forgot to mention that I also submitted it to the signature maintainers as an FP.