NIS 2008 does three scans, a full system scan is done by you or Scheduled Tasks. A quick scan is done at startup or when norton has updated the Definitions and then there is a windows file scan, this is just norton scanning files as they are used to make sure they are clean. I get those listings too.