Your first paragraph is not entirely true. Antivirus software does much more than that. For example watching over IO operations, boot, memory management, interprocess communication and so on. "Scanning files" is the basic thing to do but it does not stop there.