I think your last question said it all. If you exclude the .exe's you mention, how would you detect it if one of them got infected?
I don't think the relatively small gain in performance would be worth the risk involved. Kim ________________________________ From: David Lum [mailto:[email protected]] Sent: Thursday, May 07, 2009 11:01 AM To: NT System Admin Issues Subject: Anti-virus excluding I'm trying to fine-tune the performance of our anti-virus software. I've gone through and added exclusions to files and folder Microsoft recommends in this article: http://support.microsoft.com/kb/822158 My question is this - what's the danger of using Process Explorer on a known clean PC and excluding every currently running .EXE to the list? Our systems are pretty standard, so I'd like to add exclusions for stuff like Intel's wireless management (C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe), Java (C:\Program Files\Java\jre6\bin\jusched.exe) and a host of other things. However would I be opening up my systems for a virus that might want to steal these names? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
