AV On-demand scanner/On-access scanner query

Posted on 2008-10-13
Last Modified: 2013-12-09

I have a query regarding AV scans. From what I understand there are two types, on-demand and on-access, and I think they are as below. Could someone clarify?

On-demand: The scan that takes place at a set time each day/week etc

On-access: Real time scanning that occurs whenever someone reads a file/writes to a file.

Also, it is possible to set the AV to scan 'on read' and 'on write'. Can someone clarify what this means and what would be recommended for, say, a shared folder on a file server?

Question by:bruce_77
  • 3
  • 2

Expert Comment

ID: 22705232
It's literal.  On Demand means that it's going to check at a specific time that's been scheduled or when you manually tell it to.  On Access means whenever the file is accessed by the machine running the AV.  So if you're the client machine running the AV and you have it set to On Access then any file your machine opens or modifies in any way will be scanned.  There are always file type exceptions in your AV preferences so be careful to know what those are.


Author Comment

ID: 22705338

So the access-scanner set to scan 'on read only' means everytime the file is accessed?

And the similarly set to scan on 'write only' means everytime the file is modified?

Are there any recommendations on which one to use?

Expert Comment

ID: 22705391
If it doesn't impact the performance of your machine too much leave them both on.  If you're accessing a shared folder that other machines are also accessing then always have the 'READ' on and again if your machine doesn't have any performance issues also do the WRITE as well.

The main difference is that if you're READING the file you want to make sure you're not opening anything that has a virus, and when you WRITE the file you want to make sure that something else doesn't piggy back on top and write with it.

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline


Author Comment

ID: 22705530
To be honest, I'm still a little confused..

Let's say I have a folder named HR, on my File/Print server, FP01.

On read only: Does this mean scan whenever -any- computer accesses the file (read the file), or whenever FP01 (or rather a user logged onto FP01) opens a file in HR and reads it?


On write-only: Does this mean whenever any computer attempts to modify files within HR, or when FP01 modifies it?

Thanks for the help

Accepted Solution

razorwoods earned 500 total points
ID: 22705599
If this is a workstation or home version of the AV program then it will ONLY engage On-Access if the person is on FP01 and accessing.  The AV program won't know if a network user accesses the file, only a local user.  Local to the machine running the AV software.

If this the a full server version of AV there are lots of other special settings typically for the network as well.


Expert Comment

ID: 22706070
On read scanner is every file used by the computer put into memory of every file being read from your hard drive , and On write is every time a file is written on to the hard drive. the scenario oof a share file server i would recommend both of them but especifically if you have network map drive there is an option for this called network drives. the most demanding of the two features is on read but is the most safe to use, i would recommend and use both cause some types of viruses write files on your pc through share folder and this option will defenitely stop the virus from replicating, on the other hand y are constantly using files from this server the on read option scans every file you are using from the server on use. on some scenarios where the pc doesnt have enough hardware what we usually do is leave only the on write feature cause is the less demanding and we set and on demand scan more often like 3 times a week.

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

These are on the increase and getting more common these days. Users who use the Google search engine may complain of having their search redirected to unwanted sites, regardless of what browser is used. This happens when the system is infected with…
By the time you finish reading this article, you may have already lost all your money because you don't know the simple steps to securing your BitCoin wallet. BitCoin is an incredible invention. It is a decentralized currency system, which is the…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now