Hello hoho and welcome. At the moment it's an on demand scanner, but the exec protection scans each file for code before it could execute at all and thus prevents infection of your system. TDS adds the right-click scan to the menu in windows explorer so you can scan each file. In the coming TDS-4 families are an active guard and another scanner, no details known yet but the names say it all. If you download files, do so to a safe area like a download folder so you can find them back and make it a habit to scan that immediately before doing anything with the files. If you mean for illegal incoming files, Port Explorer will show you about incoming data packets and which application is responsible for it, and in case there would be illegal or hidden connections from or to your system you see them real time immediately in your PE screen with all the options to sniff and block those. Your firewall should be able to block them too, btw.