Disabling functionality does not automatically remove functionality from the cPanel interface. You would need to disable "Virus Scanner" in Feature Manager's Disabled Feature List. You can get to Feature Manager by going to WHM -> Packages -> Feature Manager.