Filemon displays file system activity in real time.
Try the following:
1. Ensure that there is an Antivirus strategy documents.
2. Ensure that the Antivirus covers Servers as well as end user.
3. review the frequency of Antivirus update.
4.Ensure that the Antivirus server is updated whenever there is virus announcement.