Interestingly enough my VRDB generation duration (around 7 minutes) isn't much different to my local disks, standard scan without archives (8.5 minutes), so it could well also be scanning those files covered by the VRDB.
I would have though that they would have to be scanned otherwise there isn't much point in recovering to a possibly infected file. Since I do both on-demand scans and VRDB generation manually as part of my regular system maintenance, I usually do the on-demand scan first and then the VRDB generation.