A: Sometimes. But many nulled themes use polymorphic code that changes each time the file is loaded. Your server-side antivirus (ClamAV) might miss it.