Scanning a large disk for virii takes a lot of time and resources, often in an impolite manner. Here’s a hypothetical question that the supergeniuses at the anti-virus companies might like to consider: Is there a way to compromise the filesystem’s journal such that disk activity is not recorded? And, if the journal is safe, then [many expletives deleted] scan the journal, not the disk.