Comment 3 for bug 1001725

No. That's not the correct diagnosis. You're right it's not created in the postinst. It's shipped directly in the clamav-base package. I think it's /var/log/clamav/clamav.log itself that's missing. I don't know how that can happen, however.