clamscan writes all regular program messages to stdout and
errors/warnings to stderr. You can use the option
to redirect all program messages to stdout. Warnings and error
libclamav are always printed to stderr.
A typical output from
clamscan looks like this:
/tmp/test/removal-tool.exe: Worm.Sober FOUND
/tmp/test/error.hta: VBS.Inor.D FOUND
When a virus is found its name is printed between the
FOUND strings. In case of archives the scanner depends on libclamav
and only prints the first virus found within an archive:
$ clamscan malware.zip
malware.zip: Worm.Mydoom.U FOUND
When using the -allmatch(-z) flag, clamscan may print multiple virus
FOUND lines for archives and files.