Scheduled scans are a must

We map reputation based on individual files as well as families/fuzzy groupings.

We do show "temporarily unsure" as 'U' in our scan logs - U = unsure/unknown but we don't warn users about them. In many cases, it is hard to immediately trust a program because of the possibility for hidden code (i.e. if a program triggers an infection only on April 1st but otherwise provides useful functionality to the user) so we always tend to leave a program unknown rather than trusting it immediately.