by Andrew Nicols.
That should pretty much do the job. You may find that you have to do make some ACL changes - it will depend on your setup. ISTR that the clamav-daemon needs to be able to read files written by the web server user.
Of course, you will need to tell Moodle to pass files through clamdscan.
Andrew