Microsoft je objavio članak baze znanja u^{(Knowledge Base)} kojem su navedene preporuke za poboljšanje performansi u sustavu Windows^(Windows) u poslovnom^(Enterprise) okruženju kada se izvode antivirusni skeneri. Microsoft preporučuje da antivirusnim skenerom ne skenirate sljedeće datoteke i mape. ^{(Microsoft recommends that you not scan the following files and folders with your antivirus scanner.)}Ove datoteke nisu u opasnosti od infekcije. Ako skenirate ove datoteke, može doći do ozbiljnih problema s izvedbom zbog zaključavanja datoteke.

U većini slučajeva, naš antivirusni softver ne stvara probleme dok koristite automatska^(Automatic) ažuriranja za instaliranje Windows ažuriranja^{(Windows Updates)} na vaš računalni sustav. Ali bilo je trenutaka kada je utvrđeno da neki sigurnosni softver blokira neke datoteke kritične za sustav ili ometa nesmetan rad Microsoftovih ažuriranja^{(Microsoft Updates)} .

Ako smatrate da vaš antivirusni softver možda ometa vaše ažuriranje sustava Windows^{(Windows Update)} , trebali biste ga privremeno onemogućiti. Ili tada možete dodati neke datoteke na popis isključenja^(Exclusion) vašeg sigurnosnog softvera tako da se te sistemske datoteke povezane s Windows Update uopće ne skeniraju.^{(Windows Update)}

Svoj antivirusni softver možete postaviti da ne skenira datoteke u mapi %windir%SoftwareDistribution. Te datoteke nisu u opasnosti od zaraze, pa ako skenirate te datoteke, može doći do problema jer se neke datoteke mogu zaključati.

Ako je određeni skup datoteka identificiran imenom, izuzmite samo te datoteke umjesto cijele mape. Ponekad se cijela mapa mora isključiti. Ne isključujte ništa od toga na temelju ekstenzije naziva datoteke.

Datoteke koje možete isključiti iz antivirusnih^(Antivirus) skeniranja

^{(Microsoft Windows Update)}Datoteke povezane s Microsoft Windows Update ili Automatskim ažuriranjem :^{(Automatic Update)}

1) Datoteka baze podataka Windows Update ili Automatsko ažuriranje. ^{(The Windows Update or Automatic Update database file.)}Ova se datoteka nalazi u sljedećoj mapi:

 %windir%\SoftwareDistribution\Datastore

Isključite datoteku Datastore.edb .

2) Datoteke dnevnika transakcija. ^{(The transaction log files.)}Ove datoteke se nalaze u sljedećoj mapi:

%windir%\SoftwareDistribution\Datastore\Logs

Isključite sljedeće datoteke:

a) Edb*.log

b) Res1.log . Datoteka se zove Edbres00001.jrs za Windows 10/8/7/Vista i Windows Server .

c) Res2.log . Datoteka se zove Edbres00002.jrs za Windows 10/8/7/Vista i Windows Server .

d) Edb.chk

e) Tmp.edb

f) Sljedeće datoteke na putu %windir%\security treba dodati na popis izuzetaka:

•  *.edb
• *.sdb
• *.log
• *.chk

Napomena:^(Note:) Ako ove datoteke nisu izuzete, sigurnosne baze podataka su obično oštećene, a pravila grupe^{(Group Policy)} se ne mogu primijeniti kada skenirate mapu.

Datoteke povezane s pravilima grupe:^{(Group Policy related files:)}

1) Podaci o korisničkom registru grupnih pravila^{(Group Policy user registry information)} . Ove datoteke se nalaze u sljedećoj mapi:

%allusersprofile%\

Isključite sljedeću datoteku: NTUser.pol

2) Datoteka postavki klijenta grupne politike. ^{(Group Policy client settings file. )}Ove datoteke se nalaze u sljedećoj mapi:

%Systemroot%\system32\GroupPolicy\

Isključite sljedeću datoteku: registry.pol

Za sve takve datoteke za Windows Windows 11 , 10, Windows 8, Windows 7 i Windows Server posjetite KB822158 .

Međutim, TrendMicro se s tim ne slaže u potpunosti:^{(However, TrendMicro does not agree with it completely:)}

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Nadam se da će vam ovaj post biti koristan!

Windows files and folders you may exclude from Antivirus scans

Microsoft has published a Knоwledge Base article that lists down recommendations to improve performance in Windows in an Enterprise environment when running antivirus scanners. Microsoft recommends that you not scan the following files and folders with your antivirus scanner. These files are not at risk of infection. If you scan these files, serious performance problems may occur because of file locking.

In most cases, our antivirus software does not create problems while using Automatic Updates to install Windows Updates on your computer system. But there have been times when some security software have been found to block some system-critical files or interfere with the smooth working of Microsoft Updates.

If you feel that your antivirus software may be interfering with your Windows Update, you should temporarily disable it. Or then you could add some files to the Exclusion list of your security software so that these Windows Update related system files are not scanned at all.

You may set your antivirus software to not scan the files in the %windir%\SoftwareDistribution folder. These files are not at risk of infection, and so if you scan these files, problems may occur because some files may get locked.

Where a specific set of files is identified by name, exclude only those files instead of the whole folder. Sometimes, the whole folder must be excluded. Do not exclude any one of these based on the file name extension.

Files you may exclude from Antivirus scans

Microsoft Windows Update or Automatic Update related files:

1) The Windows Update or Automatic Update database file. This file is located in the following folder:

 %windir%\SoftwareDistribution\Datastore

Exclude the Datastore.edb file.

2) The transaction log files. These files are located in the following folder:

%windir%\SoftwareDistribution\Datastore\Logs

Exclude the following files:

a) Edb*.log

b) Res1.log. The file is named Edbres00001.jrs for Windows 10/8/7/Vista and Windows Server.

c) Res2.log. The file is named Edbres00002.jrs for Windows 10/8/7/Vista and Windows Server.

d) Edb.chk

e) Tmp.edb

f) The following files in the %windir%\security path should be added to the exclusions list:

•  *.edb
• *.sdb
• *.log
• *.chk

Note: If these files are not excluded, security databases are typically corrupted, and Group Policy cannot be applied when you scan the folder.

Group Policy related files:

1) Group Policy user registry information. These files are located in the following folder:

%allusersprofile%\

Exclude the following file: NTUser.pol

2) Group Policy client settings file. These files are located in the following folder:

%Systemroot%\system32\GroupPolicy\

Exclude the following file: registry.pol

To know about all such files for Windows Windows 11, 10, Windows 8, Windows 7 and Windows Server visit KB822158.

However, TrendMicro does not agree with it completely:

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Hope you find this post useful!

Related posts

• Besplatni antivirusni diskovi za spašavanje za Windows 11/10

• Besplatni samostalni antivirusni skeneri na zahtjev za Windows 11/10

• VoodooShield: Besplatni anti-izvršni HIPS sigurnosni softver za Windows

• Mrežni skeneri URL-a za skeniranje web-mjesta za zlonamjerni softver, viruse, krađu identiteta itd

• Provjerite je li vaše računalo zaraženo zlonamjernim softverom ASUS Update

• Popravite Malwarebytes visoku potrošnju procesora i memorije u sustavu Windows 11/10

• CyberGhost Immunizer pomoći će spriječiti napade ransomwarea

• Nije moguće preuzeti ili instalirati antivirusni softver na Windows 10

• IObit Malware Fighter Besplatan pregled i preuzimanje

• Bitdefender besplatno antivirusno izdanje za Windows 10

• Kako koristiti Avast Boot Scan za uklanjanje zlonamjernog softvera s računala sa sustavom Windows

• Kako spriječiti zlonamjerni softver - Savjeti za osiguranje sustava Windows 11/10

• Popis besplatnih alata za dešifriranje ransomwarea za otključavanje datoteka

• Malwarebytes blokira program ili web-mjesto; Kako dodati izuzimanja?

• AVG korisničko sučelje nije se uspjelo ispravno učitati u sustavu Windows 10

• Stvorite medij za pokretanje pomoću ESET SysRescue Live

• Koji je bio prvi Windows Virus i AntiVirus?

• Malwarebytes 4.0 pregled i nove značajke: Anti-malware za Windows

• Norascan je anti-malware skener za Windows PC

• Kako koristiti Malwarebytes Anti-Malware za uklanjanje zlonamjernog softvera