Advice Request Scan on File Open vs Scan on File Execution

Please provide comments and solutions that are helpful to the author of this topic.

RoboMan

Level 34
Thread author
Verified
Top Poster
Content Creator
Well-known
Jun 24, 2016
2,399
Many antivirus have these type of options on it's real time protection: scan files on open, execution, creation.

My main question lies here: what's the difference between scanning a file on open or on execution. It looks like the same to me.

Thanks in advance.
 

SeriousHoax

Level 47
Well-known
Mar 16, 2019
3,630
From what I understand,
On open: You open a folder containing some files and those files would be scanned. Similar to what Windows Defender and most top AVs do. On open is also known as on access. When you open a folder Windows Explorer accesses those file for reading and if any contains malware then it would be detected. Most AVs usually don't scan every files, they have some selected extensions they scan on access.

On creation: Files that are already on your system won't be scanned unless executed. If you open a folder containing few exes then those won't be scanned. Only newly created files will be scanned. For example when you extract a zip file containing other files, those extracted files are newly created so those will be scanned by the AV.

On execution: We all know about it.
 

Andy Ful

From Hard_Configurator Tools
Verified
Honorary Member
Top Poster
Developer
Well-known
Dec 23, 2014
8,042
When the user is logging to his/her account, Windows opens the desktop (files are scanned on the desktop but not files in desktop folders). The same happens when opening the Explorer (or another file explorer based on Windows Explorer). The Desktop and Windows Explorer are parts of "Windows Shell".
The files are not scanned when one uses other shells (CMD, PowerShell, Bash), except when files are executed.
 

Venustus

Level 59
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Dec 30, 2012
4,809
but didn't experience this on Norton
I was surprised myself
Image 1.jpg

Image 2.jpg

 
Last edited:

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top