Microsoft har udgivet en Knowledge Base- artikel, der viser anbefalinger til forbedring af ydeevnen i Windows i et Enterprise - miljø, når du kører antivirusscannere. Microsoft anbefaler, at du ikke scanner følgende filer og mapper med din antivirusscanner. ^{(Microsoft recommends that you not scan the following files and folders with your antivirus scanner.)}Disse filer er ikke i risiko for infektion. Hvis du scanner disse filer, kan der opstå alvorlige ydeevneproblemer på grund af fillåsning.

I de fleste tilfælde skaber vores antivirussoftware ikke problemer, mens du bruger Automatiske^(Automatic) opdateringer til at installere Windows-opdateringer^{(Windows Updates)} på dit computersystem. Men der har været tidspunkter, hvor noget sikkerhedssoftware har vist sig at blokere nogle systemkritiske filer eller forstyrre Microsoft-opdateringer^{(Microsoft Updates)} .

Hvis du føler, at din antivirussoftware muligvis forstyrrer din Windows Update , bør du midlertidigt deaktivere den. Eller så kan du tilføje nogle filer til ekskluderingslisten^(Exclusion) for din sikkerhedssoftware, så disse Windows Update -relaterede systemfiler slet ikke scannes.

Du kan indstille din antivirussoftware til ikke at scanne filerne i mappen %windir%SoftwareDistribution. Disse filer er ikke i risiko for infektion, så hvis du scanner disse filer, kan der opstå problemer, fordi nogle filer kan blive låst.

Hvor et specifikt sæt filer er identificeret ved navn, skal du kun ekskludere disse filer i stedet for hele mappen. Nogle gange skal hele mappen udelukkes. Undlad at udelukke nogen af ​​disse baseret på filtypenavnet.

Filer, du kan udelukke fra antivirus -scanninger

Microsoft Windows Update eller Automatisk opdatering^{(Automatic Update)} relaterede filer:

1) Windows Update- eller Automatic Update-databasefilen. ^{(The Windows Update or Automatic Update database file.)}Denne fil er placeret i følgende mappe:

 %windir%\SoftwareDistribution\Datastore

Udelad filen Datastore.edb .

2) Transaktionslogfilerne. ^{(The transaction log files.)}Disse filer er placeret i følgende mappe:

%windir%\SoftwareDistribution\Datastore\Logs

Ekskluder følgende filer:

a) Edb*.log

b) Res1.log . Filen hedder Edbres00001.jrs til Windows 10/8/7/Vista og Windows Server .

c) Res2.log . Filen hedder Edbres00002.jrs til Windows 10/8/7/Vista og Windows Server .

d) Edb.chk

e) Tmp.edb

f) Følgende filer i %windir%\security skal tilføjes til undtagelseslisten:

•  *.edb
• *.sdb
• *.log
• *.chk

Bemærk:^(Note:) Hvis disse filer ikke udelukkes, er sikkerhedsdatabaser typisk beskadiget, og gruppepolitik^{(Group Policy)} kan ikke anvendes, når du scanner mappen.

Gruppepolitik relaterede filer:^{(Group Policy related files:)}

1) Gruppepolitik brugerregistreringsoplysninger^{(Group Policy user registry information)} . Disse filer er placeret i følgende mappe:

%allusersprofile%\

Udelad følgende fil: NTUser.pol

2) Gruppepolitik-klientindstillingsfil. ^{(Group Policy client settings file. )}Disse filer er placeret i følgende mappe:

%Systemroot%\system32\GroupPolicy\

Udelad følgende fil: registry.pol

Besøg KB822158 for at vide om alle sådanne filer til Windows Windows 11 , 10, Windows 8, Windows 7 og Windows Server .

TrendMicro er dog ikke helt enig i det:^{(However, TrendMicro does not agree with it completely:)}

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Håber du finder dette indlæg nyttigt!

Windows files and folders you may exclude from Antivirus scans

Microsoft has published a Knowledge Βase аrticle that lists down recommendations to improve рerformancе in Wіndows in an Enterprise environment when running antivirus sсanners. Microsoft recommends that you not scan the following files and folders with your antivirus scanner. These files are not at risk of infection. If you scan these files, serious performance problems may occur because of file locking.

In most cases, our antivirus software does not create problems while using Automatic Updates to install Windows Updates on your computer system. But there have been times when some security software have been found to block some system-critical files or interfere with the smooth working of Microsoft Updates.

If you feel that your antivirus software may be interfering with your Windows Update, you should temporarily disable it. Or then you could add some files to the Exclusion list of your security software so that these Windows Update related system files are not scanned at all.

You may set your antivirus software to not scan the files in the %windir%\SoftwareDistribution folder. These files are not at risk of infection, and so if you scan these files, problems may occur because some files may get locked.

Where a specific set of files is identified by name, exclude only those files instead of the whole folder. Sometimes, the whole folder must be excluded. Do not exclude any one of these based on the file name extension.

Files you may exclude from Antivirus scans

Microsoft Windows Update or Automatic Update related files:

1) The Windows Update or Automatic Update database file. This file is located in the following folder:

 %windir%\SoftwareDistribution\Datastore

Exclude the Datastore.edb file.

2) The transaction log files. These files are located in the following folder:

%windir%\SoftwareDistribution\Datastore\Logs

Exclude the following files:

a) Edb*.log

b) Res1.log. The file is named Edbres00001.jrs for Windows 10/8/7/Vista and Windows Server.

c) Res2.log. The file is named Edbres00002.jrs for Windows 10/8/7/Vista and Windows Server.

d) Edb.chk

e) Tmp.edb

f) The following files in the %windir%\security path should be added to the exclusions list:

•  *.edb
• *.sdb
• *.log
• *.chk

Note: If these files are not excluded, security databases are typically corrupted, and Group Policy cannot be applied when you scan the folder.

Group Policy related files:

1) Group Policy user registry information. These files are located in the following folder:

%allusersprofile%\

Exclude the following file: NTUser.pol

2) Group Policy client settings file. These files are located in the following folder:

%Systemroot%\system32\GroupPolicy\

Exclude the following file: registry.pol

To know about all such files for Windows Windows 11, 10, Windows 8, Windows 7 and Windows Server visit KB822158.

However, TrendMicro does not agree with it completely:

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Hope you find this post useful!

Related posts

• Gratis bootbare AntiVirus-redningsdiske til Windows 11/10

• Gratis Standalone On demand Antivirus-scannere til Windows 11/10

• VoodooShield: Gratis anti-eksekverbar HIPS-sikkerhedssoftware til Windows

• Online URL-scannere til at scanne websteder for malware, virus, phishing osv

• Tjek, om din computer er blevet inficeret af ASUS Update Malware

• Sådan tester du, om Antivirus fungerer korrekt eller ej på Windows PC

• Tidlig lancering af Anti-Malware (ELAM) beskyttelsesteknologi i Windows 10

• Gratis værktøjer til fjernelse af malware til at fjerne specifik virus i Windows 11/10

• Eset Rogue Applications Remover, et gratis Rogue Removal Tool

• Hvilken var den første Windows Virus og AntiVirus?

• Opret bootbare medier ved hjælp af ESET SysRescue Live

• Emsisoft Emergency Kit: Gratis bærbar anti-malware

• Sådan bruger du Malwarebytes Anti-Malware til at fjerne malware

• Bitdefender Free Antivirus Edition til Windows 10

• AVG UI kunne ikke indlæses korrekt på Windows 10

• Malwarebytes Support Tool: Fejlfinding eller afinstaller Malwarebytes

• Eternal Blues ransomware scanner til WannaCry & NotPetya

• Ret Malwarebytes høj CPU- og hukommelsesforbrug på Windows 11/10

• Crystal Security er et gratis cloud-baseret malware-detektionsværktøj til pc

• Liste over gratis Rootkit Remover, Scanner, Revealer, Detector software