4 ms·
It will catch an infected file that simply passes through the computer without being opened or executed.
by simonh 4y ago
It will catch an infected file that simply passes through the computer without being opened or executed.
- robryk 4y agoWhat do you mean by "passes"? Unless it's a file on a removable medium or a remote fs, it has to be created, which requires opening it. Scanning removable media upon insertion and remote fses upon mounting is going to look mighty suspicious and, in the latter case, be cover for data exfiltration.