Are you running as an administrator? The only time a "random" scan will start is if a plugin in your project or something external to SONAR modified a file in one of your VST scan paths. Any change to those folders will trigger a background scan of your vst paths, since that typically indicates that a new plugin was added.
Now there are some old plugins that write to the program folder. This has been illegal to do at least since Windows Vista. User account control forbids this and will virtualize the file being written preventing the programs folder from being changed. Well behaved plugins should never do this. However if you are running legacy plugins and are in Admin mode then there is no way to prevent it other than removing those plugins or NOT running as an admin.
This is not a problem with the auto scan mechanism itself.
If for some reason you must as an administrator then there is not much you can do other than disabling the auto scan and manually scanning when you add stuff. Please try and find out which plugin is updating your scan folders by a process of elimination.