By default, ClamAV doesn't create a log for its scans, and you have to manually type "-l clamav.log" on the end of a scan within Unix in order for it to create one.
Obviously, with the automatic scanning set up in Moodle, it doesn't seem you can do this, unless there's a trick that I'm not aware of.
Can anyone give me some pointers? Thanks.