Scanning comparison: writing to disk vs. reading from disk

The on-access scanner treats scans differently depending on whether the user is writing to disk or reading from disk.

When files are being written to disk, it scans these items:

  • Incoming files being written to the local hard drive.
  • Files being created on the local hard drive or a mapped network drive (this includes new files, modified files, or files being copied or moved from one drive to another).

When files are being read from disk, it scans these items:

  • Outgoing files being read from the local hard drive. Select On network drives on the Scan Items tab to include remote network files.
  • Any file being executed on the local hard drive.
  • Any file opened on the local hard drive.
  • Any file being renamed on the local hard drive, if the file properties have changed.