Comments by "eDoc2020" (@eDoc2020) on "Lost+Found: Why Does This Linux Folder Exist??" video.

If they wanted to cause clutter they'd just put each recovered file directly in the root of the partition and give it a name like file0000.chk. Yes, I'm looking at Microsoft...
1
 @SkyFly19853 ClamAV by itself isn't realtime but can be used by other programs. Samba for instance can call ClamAV in realtime so your file server doesn't share out infected files.
1
@SkyFly19853 Like I said Samba combined with vfs_virusfilter and ClamAV should do just that, catch viruses while in transit. Other programs like mail servers have similar hooks. The only thing which AFAIK doesn't exist is realtime scanning for when local Linux programs are accessing data. If you want that without writing any code you can run an instance of Samba listening on localhost and than mount that locally.
1