When scanning files, MultiAntivirus distinguishes between malware and suspicious files (in addition to the obvious category of files recognised as clean).
MultiAntivirus treats files detected as malware as files to be quarantined and deleted from their original location.
Files that are deemed suspicious are not deleted, but a trace of their passage remains in the software so that the network administrator or user can keep an eye on the situation.
ClamAV and GiesaPrecognitive in turn have the ability to identify suspicious files, specifically in ClamAV there is the PUA category, while GiesaPrecognitive follows the malware and suspicious nomenclature.