Wait. As I said before, I think that it is pretty normal that an antivirus report a problem on any kind of password protected/encrypted tar/zip archive, since it can’t inspect its content.
$ clamscan -h
--alert-encrypted[=yes/no(*)] Alert on encrypted archives and documents
--alert-encrypted-archive[=yes/no(*)] Alert on encrypted archives
Please note the asterisk: by default
clamscan doesn’t raise an alert if it find an encrypted/password protected file.
So, if I run
clamscan on the files worrying you, without any option (default don’t mind about encrypted files):
$ clamscan /usr/lib/firmware/vxge/
If I enable the mentioned options:
$ clamscan --alert-encrypted-archive /usr/lib/firmware/vxge/
/usr/lib/firmware/vxge/X3fw-pxe.ncf: Heuristics.Encrypted.Zip FOUND
/usr/lib/firmware/vxge/X3fw.ncf: Heuristics.Encrypted.Zip FOUND
So they don’t contain a virus! They are simply files that the antivirus can’t inspect.
If you still have doubts, try to create a password protected zip file, i.e.
$ zip -e test.zip somefile
Where somefile is a picture, a document, whatever file you want.
Then try to scan this zip file with KlamAV.