1. A method of scanning a computer system for malware, the method comprising: determining when an application being executed on the computer system is attempting to open a file; adding data written to the open file by the application into a malware scanner queue; and ensuring that the application has been notified that the file has been closed before scanning the queued file data to determine if it relates to potential malware.