← All detection heuristics · ClamAV
info
CLAMAV_SCAN_INCOMPLETE
What it means
ClamAV invocation failed (timeout, daemon unreachable, or DB missing).
Why it fires
The ClamAV signature pass on this run did not finish — typically because clamd was reloading its signature database (after freshclam) or briefly unreachable. The static heuristics still ran, but the AV signature signal is absent for this scan, so the score may be lower than it would be with a working clamd. Results carrying this marker are not cached, so a later lookup re-runs the analysis.