That is the main reason it cannot be as effective as boot time scan. By the time you have Windows fully running, you cannot really trust what the system says about itself when it comes to rootkits.