5.1 Deploy anti-virus software on all systems commonly affected by malicious software (particularly personal computers and servers)

PCI DSS v3.2.1 Questions and Answers Forum Maintain a Vulnerability Management Program
1

5.1 For a sample of system components including all operating system types commonly affected by malicious software, verify that anti-virus software is deployed if applicable anti-virus technology exists.