Incremental scanning only occurs in three situations:

• The scan could not complete within an explicitly specified time. The default is no time limit.
• When the task was interrupted because of a shutdown notification.
• When the task is manually stopped from VirusScan console for a scheduled on-demand scan (ODS).

Under either of these circumstances, VSE initiates an incremental scan starting with the last file that was scanned.

IMPORTANT: To show the incremental on-demand scan, the task must be scheduled because a user-invoked scan always starts from the beginning. 

Example:

1. The ODS task starts at the Start time configured above.
2. The scan stops when it reaches the allotted time and records the last file that was successfully scanned. (The allotted time is configured under Stop the task if it runs for.)
3. When the schedule for this ODS task repeats, the task continues from where it was interrupted previously.