The Spyware Active-monitoring Pattern is used for real-time spyware/grayware scanning. Only conventional scan clients use this pattern.

Smart scan clients use the Smart Scan Agent Pattern for real-time spyware/grayware scanning. Clients send scan queries to a smart protection source if the risk of the scan target cannot be determined during scanning.