Real-time scanning for unknown files are currently done by APEX.
If you enable ClamAV (by default it is disabled), ClamAV also support real-time scanning for unknown files.
There is also an option to purchase Avira as an add-on, which also can do real-time scanning for unknown files.