Yeah, but the scannow runs within Windows so if anything is changing during the boot sequence you'll at least know what file(s) it is.