I have an answer to my own comment...I have recently learned a lot about clamav...

I am running ISPConfig on a Centos 5 box.  I wanted to use clamd for better performance. 

I temporararily enabled  the rpmforge repo and installed clamd with 'yum install clamd'.  It sets up logging for you and and a lot of other stuff.

I edited the /usr/bin/sanesecurity_update.sh script at these lines:

clamscan="/usr/bin/clamdscan"
clam_sigs="/var/clamav"
clam_user="clamav"

Now I tail the correct logs:

tail /var/log/clamav/clamd.log
tail /var/log/clamav/freshclam.log 

G