I search some antiviruses whitch were used in web such norton antivirus that yahoo use it when attach file in mail, please help me
They simply have norton antivirus on the machine, and make a system call to have it scan the file. They then check the returning value. If you want to give that a go, read up on these:
http://uk.php.net/manual/en/ref.exec.php