Found /usr/local/cpanel/3rdparty/bin/clamscan
This will scan in the current working directory

/home/torontos/public_html/taxhelpvault/wp-content/themes/blue-zinfandel-squared-10/blue-zinfandel-squared-10/footer.php: {HEX}gzbase64.inject.unclassed.15.UNOFFICIAL FOUND