We have a total of 3 malware scanners on each server. We are one of the few providers that use this many malware scanners on the server.
One is a real time scanner called ConfigServerXploit (CSX) - this is run in real time and any suspicious files are automatically quarantined.
Another is a scanner that comes along with cPanel called ClamAV - this is the one you see in cPanel (Virus Scanner) and runs on demand.
The last one is Maldet - it does not come along with cPanel, but most hosting providers install it as it is a highly rated free scanner. This runs once daily and any suspicious files are quarantined.