> No idea if newer Linux AVs are using other tricks for on-access file > scanning.... The kernel has the needed bits included nowdays. It turns out that done right its useful for some other things too such as heirarchical storage systems.