Views:

The scan engine includes three drivers: tmpreflt.sys, tmxpflt.sys, and vsapint.sys.

  • The VSAPI scan engine runs in multi-threaded mode. Hooked file Input/Output will be put into a queue and 10 scanning threads are available to process the queue.
  • There are no available settings to adjust the number of threads used.

If performance issues are encountered during real-time scans, refer to the Recommended solutions to high CPU utilization caused by NTRTScan or DBServer.exe KB article to troubleshoot the issue.