I guess the options are it’s either the virus scanner being more aggressive than required, or restic is making a non-optimal call to get the information required. It really just needs a directory listing, but it may need to read the metadata for an individual file for some reason, triggering the virus scanner.