Looks like if a mail is marked as spam by spamassassin, it is not checked by clamav. Spamassassin put the original message (including virus) in a atachment. Is there any settings in spamassassin to prevent this? I test the infected inbox with clamdscan from command line and it detect the virus sucessfully, so I think the problem is in spamassassin config.