Pegasus Mail constantly reads and writes in the mailbox directories but it also updates configuration files in its executables directory every time it starts up and shuts down. Active scanning may be configured to scan on read or scan on write. Either way, problems can occur when Pegasus Mail is tries to read or write to a file at the same time that the scanner has it locked for scanning. There are plenty of discussions that include the recommendation to exclude the Pegasus Mail executables and the \MAIL directory from active scanning.
As for scanning inbound messages, consider this... You can not execute a virus from within the body of an email. If one comes in via email it is in an attachments or is acquired by clicking a link to an external source. If there is a virus in an attachment it should be detected when the attachment is opened assuming the temp location it was written to is being actively scanned, or the location it was saved to before being opened is actively scanned. Remote graphics are potentially dangerous so are not displayed by default. Nefarious remote graphics links or any other links for that matter would not be detected by a local AV scanner anyway. There are many folks who run an email scanner or have active scanning enabled that do not encounter a problem. There are a number who have disabled active scanning to solve a problem. I suspect there are too many variables to determine why it is problematic for some and not others.
For my peace of mind I always save potentially hazardous attachments then run a manual scan of the file even though it should have been active scanned when saved. As for links, I don't click them from an email without knowing the destination URL. If in doubt I will copy the link and paste into a browser then look at the URL itself before hitting enter to open the page. That has become mostly unnecessary because both IERenderer and BearHTML display the destination URL when a link is hovered over.
The same read/write access behavior applies to syncing tools and possibly to the Acronis Nonstop Backup you are using. A sync or backup utility may grab a file at the same time Pegasus Mail tries to use it. IMHO, AV scanning, backups and syncing of any Pegasus Mail files should be done manually when Pegasus Mail is closed.
FWIW, I run Windows Defender on my Win7 machine (with the exclusions as discussed) and supplement it with period manual scans using Malwarebytes.
BTW, the question of how to exclude location from active scanning in Window Defender has come up before. Not sure if you need this or not but in case you do...
http://answers.microsoft.com/en-us/protect/wiki/protect_defender-protect_scanning/how-to-exclude-a-filefolder-from-windows-defender/f32ee18f-a012-4f02-8611-0737570e8eee
<p>Pegasus Mail constantly reads and writes in the mailbox directories but it also updates configuration files in its executables directory every time it starts up and shuts down.&nbsp; Active scanning may be configured to scan on read or scan on write.&nbsp; Either way, problems can occur when Pegasus Mail is tries to read or write to a file at the same time that the scanner has it locked for scanning.&nbsp; There are plenty of discussions that include the recommendation to exclude the Pegasus Mail executables and the \MAIL directory from active scanning.</p><p>As for scanning inbound messages, consider this... You can not execute a virus from within the body of an email.&nbsp; If one comes in via email it is in an attachments or is acquired by clicking a link to an external source.&nbsp; If there is a virus in an attachment it should be detected when the attachment is opened assuming the temp location it was written to is being actively scanned, or the location it was saved to before being opened is actively scanned.&nbsp; Remote graphics are potentially dangerous so are not displayed by default.&nbsp; Nefarious remote graphics links or any other links for that matter would not be detected by a local AV scanner anyway.&nbsp; There are many folks who run an email scanner or have active scanning enabled that do not encounter a problem.&nbsp; There are a number who have disabled active scanning to solve a problem.&nbsp; I suspect there are too many variables to determine why it is problematic for some and not others.&nbsp; </p><p>For my peace of mind I always save potentially hazardous attachments then run a manual scan of the file even though it should have been active scanned when saved.&nbsp; As for links, I don't click them from an email without knowing the destination URL.&nbsp; If in doubt I will copy the link and paste into a browser then look at the URL itself before hitting enter to open the page.&nbsp; That has become mostly unnecessary because both IERenderer and BearHTML display the destination URL when a link is hovered over.
</p><p>The same read/write access behavior applies to syncing tools and possibly to the Acronis Nonstop Backup you are using.&nbsp; A sync or backup utility may grab a file at the same time Pegasus Mail tries to use it.&nbsp; IMHO, AV scanning, backups and syncing of any Pegasus Mail files should be done manually when Pegasus Mail is closed.</p><p>FWIW, I run Windows Defender on my Win7 machine (with the exclusions as discussed) and supplement it with period manual scans using Malwarebytes. </p><p>BTW, the question of how to exclude location from active scanning in Window Defender has come up before.&nbsp; Not sure if you need this or not but in case you do...</p><p>http://answers.microsoft.com/en-us/protect/wiki/protect_defender-protect_scanning/how-to-exclude-a-filefolder-from-windows-defender/f32ee18f-a012-4f02-8611-0737570e8eee
</p>