Clam Antivirus

clamd (daemonized scanner)

['ClamAV-clamd',
  \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.ctl"],
  qr/\bOK$/m, qr/\bFOUND$/m,
  qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],

Run clamd under the same user as maiad, or run it under its own uid such as clamav, add user clamav to the maia group, and then add AllowSupplementaryGroups to clamd.conf.

Match the socket name (LocalSocket) in clamd.conf to the socket name in this entry.

When running chrooted one may prefer socket "$MYHOME/clamd".

clamscan (command-line scanner)

['ClamAV-clamscan', 'clamscan',
  "--stdout --no-summary -r --tempdir=$TEMPBASE {}",
  [0], qr/:.*\sFOUND$/m, qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],