Patent ID: 7591019

Claim:
A method for optimizing a file system scan by an anti-virus (AV) driver, the method comprising: (a) initializing an anti-virus (AV) cache memory and control structures; (b) creating a log file for maintaining a log of modified files; (c) initiating logging process; (d) marking a modified file; (e) generating a file record containing information about the modified file; (f) searching for the file record in the AV cache memory and, in response to the file record being a new record, writing the file record into the AV cache memory; (g) modifying an index for writing a next cache element and changing a number of elements in the AV cache memory; (h) placing a mark into a context of the modified file indicating that the file record is placed into the AV cache memory; (i) periodically moving new records in the AV cache memory to the log file; (j) periodically moving the new records in the log file to a database; and (k) finding the file record in the AV cache memory upon receiving a request for the file record.