Apparently full scan ran (since it took several hrs to complete it must been ful scan) couple weeks ago on sunday (sunday to monday night) midnight due comp was idle long enuf for scan to start and no any indication besides comp felt bit more sluggish so conclusion is that scan runs if comp is long enuf idle unless is logged in as admin priviledges.