It could be, but virus scanners don't use FILE_FLAG_NO_BUFFERING? It seems relatively easy for them, and if some did and some didn't you'd get reviews like "slower than the competition".
I don't claim to have any special knowledge here so yeah, could be. I didn't know about that flag BTW - thanks for mentioning it. It sounds similar to O_DIRECT on linux?