libclamav has callbacks when a virus is found or when signatures are loaded. These could be exposed as events in ClamEngine.