It's been a while but I would benchmark how ClamAV fares. At $(day job) we implemented scanning for file uploads and after our security team tested they noticed that it detected things fairly poorly (60% was on the high side) for very well known malicious content iirc.
We ultimately scrapped it, if anyone else has any better experience I'd love to hear it.
We ultimately scrapped it, if anyone else has any better experience I'd love to hear it.