ClamWin identified Exploit.JS.CVE-2005-1790.A in file C:\ProgramData\Symantec\LiveUpdate\Downloads\1171504390jtun_nisenidfull25.x86.full.zip. I submitted the file to VirusTotal and ClamAV 0.90.1 was the only scanner to identify the exploit. My question is this a real exploit or a false positive found in an update of the Norton virus database. Has anyone else had this result?

Thank you

most likely it is a false positive. Try to unpack the archive and identify an individual file that causes the detection. Then rescan it on virustotal

The file in the archive clamwin flagged was sigs.dat, which I am pretty sure is a Norton signatures database file. Again, clamwin was the only engine on VirusTotal that flagged the file as a threat.