Pass filename back to scanner correctly from ClamAV check

Wasn't sanitizing the filename before, resulting in an extra preceding
slash.