ClamAV scan did not complete

CLAMAV_SCAN_INCOMPLETE

← All detection heuristics · ClamAV

info CLAMAV_SCAN_INCOMPLETE

What it means

ClamAV invocation failed (timeout, daemon unreachable, or DB missing).

Why it fires

The ClamAV signature pass on this run did not finish — typically because clamd was reloading its signature database (after freshclam) or briefly unreachable. The static heuristics still ran, but the AV signature signal is absent for this scan, so the score may be lower than it would be with a working clamd. Results carrying this marker are not cached, so a later lookup re-runs the analysis.

Other ClamAV heuristics

CLAMAV_DETECTION