# ls -lahS $(find /var -type f -size +10000k)
................................................................................................................................
-rw-r----- 1 amavis      amavis       15M 2009-06-18 09:32 /var/lib/amavis/tmp/clamav-fb98b299a2186a171e0eff62c9769b40/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 04:14 /var/lib/amavis/tmp/clamav-fbe77b890a75b059fde69e4ada02a213/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-17 19:42 /var/lib/amavis/tmp/clamav-fc0868887e99a80684498053910663e5/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 00:00 /var/lib/amavis/tmp/clamav-fd11c289b7281a30be7dd1f529991b60/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 05:35 /var/lib/amavis/tmp/clamav-fd8323e3fcaa4079117a04e77a01fc8a/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 08:11 /var/lib/amavis/tmp/clamav-fd988d8a36c2831242401da5ed44a53e/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 09:54 /var/lib/amavis/tmp/clamav-fdd64715b31b430d0be5b6fba64404c9/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 07:49 /var/lib/amavis/tmp/clamav-fece59cabd48cc0986e327e2fd2bff04/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 09:16 /var/lib/amavis/tmp/clamav-ff6c8959b7688d324f27e1101c5f416d/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-17 17:20 /var/lib/amavis/tmp/clamav-ff79e9d07b1ecaa098d9688998a894ac/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-17 13:42 /var/lib/amavis/tmp/clamav-ff7df9dc8c62bc87c06c54f960799a22/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-17 19:15 /var/lib/amavis/tmp/clamav-ffae0ea18fc54cc810fba131ff52b4d1/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-17 15:54 /var/lib/amavis/tmp/clamav-ffbf913739285e574c544b1c6b6d16e4/main.ndb
-rw-r----- 1 amavis      amavis       15M 2009-06-18 09:59 /var/lib/amavis/tmp/clamav-fff1e3f4729834565097b997749aa933/main.ndb
-rw-r----- 1 amavis      amavis       12M 2009-06-18 11:09 /var/lib/amavis/tmp/clamav-51e36700f3f9e75296080711ccb17977/main.ndb

vi /etc/logrotate.d/amavisd

/var/lib/amavis/tmp/* {
rotate 7
daily
compress
missingok
create 0640 root root
postrotate
}

# freshclam
ClamAV update process started at Wed Oct  9 13:56:28 2013
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.95.3 Recommended version: 0.98
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
daily.cld is up to date (version: 17951, sigs: 406957, f-level: 63, builder: guitar)

# crontab -e
# clamav
22 2 * * *  /usr/bin/freshclam >/dev/null 2>&1

# clamav scan
22 3 * * *  clamscan -r / >/dev/null 2>&1