diff --git a/resources/views/layouts/dvx.blade.php b/resources/views/layouts/dvx.blade.php
index 6fb97ef..419d6d8 100644
--- a/resources/views/layouts/dvx.blade.php
+++ b/resources/views/layouts/dvx.blade.php
@@ -91,6 +91,11 @@
                 Rspamd
                 <div class="mw-nav-dot"></div>
             </a>
+            <a href="{{ route('ui.security.clamav') }}" class="mw-nav-item {{ request()->routeIs('ui.security.clamav') ? 'active' : '' }}">
+                <svg width="14" height="14" viewBox="0 0 14 14" fill="none"><path d="M7 1.5C4 1.5 1.5 4 1.5 7S4 12.5 7 12.5 12.5 10 12.5 7 10 1.5 7 1.5Z" stroke="currentColor" stroke-width="1.2"/><path d="M5 7l1.5 1.5L9.5 5.5" stroke="currentColor" stroke-width="1.2" stroke-linecap="round" stroke-linejoin="round"/></svg>
+                Virenschutz
+                <div class="mw-nav-dot"></div>
+            </a>
             <a href="{{ route('ui.security.audit') }}" class="mw-nav-item {{ request()->routeIs('ui.security.audit') ? 'active' : '' }}">
                 <svg width="14" height="14" viewBox="0 0 14 14" fill="none"><path d="M1 3.5h12M1 7h12M1 10.5h12" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/></svg>
                 Audit-Logs
diff --git a/scripts/update.sh b/scripts/update.sh
index d294c25..6252bdb 100644
--- a/scripts/update.sh
+++ b/scripts/update.sh
@@ -188,9 +188,9 @@ fix_permissions(){
     frontend_build_quiet || true
   fi
 
-  # Nur leeren — KEIN config:cache/route:cache (kaputte Cache-Datei → 404/500)
-  # Laravel lädt Config + Routes beim nächsten Request automatisch frisch
+  # Erst leeren, dann neu aufbauen — Permissions sind oben bereits korrekt gesetzt
   sudo -u "${APP_USER}" php "${APP_DIR}/artisan" optimize:clear --quiet 2>/dev/null || true
+  sudo -u "${APP_USER}" php "${APP_DIR}/artisan" optimize        --quiet 2>/dev/null || true
 }
 
 ensure_system(){