In embodiments of the present invention improved capabilities are described for reducing
computer file access time associated with on-access scanning through predictive preemptive scanning, where the prediction may be enabled through the development and use of a file access performance cost mapping of a computing facility's
file system. In a first step, file access information describing a pattern of each of a plurality of computer files that have been accessed in a
computer file system may be collected. In a second step, the file access information may be processed to generate a file access performance cost statistic for each of the plurality of computer files, where the file access performance cost statistic may be a measure of the time aggregate effect on the computing facility'
s system performance associated with the access of the file. In a third step, the file access performance cost statistic may be maintained for each of the plurality of files accessed by the computing facility. In a fourth step, the file access performance cost mapping of the computing facility's
file system relating to the plurality of
computer file may be generated, where the file access performance cost mapping may provide an indication of which of the plurality of files in the
file system produce the greatest time aggregate file access effect based on the computing facility'
s system performance. Finally, in a fifth step, files from the computer file
system may be pre-scanned based on the file access performance cost mapping. In embodiments, pre-scanning may access at least one of the plurality of files for scanning prior to the file being called for a use, such as by an
operating system, an application, a utility program, and the like. The step of pre-scanning may be performed during periods of low computing facility
processing activity, and may result in a reduced need to scan the computer file when the computer file is accessed for use.