Microsoft telah menerbitkan artikel Basis Pengetahuan^{(Knowledge Base)} yang mencantumkan rekomendasi untuk meningkatkan kinerja di Windows di lingkungan Perusahaan^(Enterprise) saat menjalankan pemindai antivirus. Microsoft menyarankan Anda untuk tidak memindai file dan folder berikut dengan pemindai antivirus Anda. ^{(Microsoft recommends that you not scan the following files and folders with your antivirus scanner.)}File-file ini tidak berisiko terinfeksi. Jika Anda memindai file ini, masalah kinerja yang serius dapat terjadi karena penguncian file.

Dalam kebanyakan kasus, perangkat lunak antivirus kami tidak menimbulkan masalah saat menggunakan Pembaruan Otomatis^(Automatic) untuk menginstal Pembaruan Windows^{(Windows Updates)} di sistem komputer Anda. Tetapi ada kalanya beberapa perangkat lunak keamanan ditemukan memblokir beberapa file penting sistem atau mengganggu kelancaran Pembaruan Microsoft^{(Microsoft Updates)} .

Jika Anda merasa bahwa perangkat lunak antivirus Anda mungkin mengganggu Pembaruan Windows^{(Windows Update)} Anda, Anda harus menonaktifkannya untuk sementara. Atau kemudian Anda dapat menambahkan beberapa file ke daftar Pengecualian^(Exclusion) perangkat lunak keamanan Anda sehingga file sistem terkait Pembaruan Windows ini tidak dipindai sama sekali.^{(Windows Update)}

Anda dapat mengatur perangkat lunak antivirus Anda untuk tidak memindai file di folder %windir%SoftwareDistribution. File-file ini tidak berisiko terinfeksi, jadi jika Anda memindai file-file ini, masalah dapat terjadi karena beberapa file mungkin terkunci.

Jika kumpulan file tertentu diidentifikasi berdasarkan nama, kecualikan hanya file tersebut alih-alih seluruh folder. Terkadang, seluruh folder harus dikecualikan. Jangan mengecualikan salah satu dari ini berdasarkan ekstensi nama file.

File yang mungkin Anda kecualikan dari pemindaian Antivirus

^{(Microsoft Windows Update)}File terkait Pembaruan Microsoft Windows atau Pembaruan Otomatis :^{(Automatic Update)}

1) File database Pembaruan Windows atau Pembaruan Otomatis. ^{(The Windows Update or Automatic Update database file.)}File ini terletak di folder berikut:

 %windir%\SoftwareDistribution\Datastore

Kecualikan file Datastore.edb .

2) File log transaksi. ^{(The transaction log files.)}File-file ini terletak di folder berikut:

%windir%\SoftwareDistribution\Datastore\Logs

Kecualikan file berikut:

a) Edb*.log

b) Res1.log . File tersebut bernama Edbres00001.jrs untuk Windows 10/8/7/Vista dan Windows Server .

c) Res2.log . File tersebut bernama Edbres00002.jrs untuk Windows 10/8/7/Vista dan Windows Server .

d) Edb.chk

e) Tmp.edb

f) File berikut di jalur %windir%\security harus ditambahkan ke daftar pengecualian:

•  *.edb
• *.sdb
• *.catatan
• *.chk

Catatan:^(Note:) Jika file ini tidak dikecualikan, database keamanan biasanya rusak, dan Kebijakan Grup^{(Group Policy)} tidak dapat diterapkan saat Anda memindai folder.

File terkait Kebijakan Grup:^{(Group Policy related files:)}

1) Informasi registri pengguna Kebijakan Grup^{(Group Policy user registry information)} . File-file ini terletak di folder berikut:

%allusersprofile%\

Kecualikan file berikut: NTUser.pol

2) File pengaturan klien Kebijakan Grup. ^{(Group Policy client settings file. )}File-file ini terletak di folder berikut:

%Systemroot%\system32\GroupPolicy\

Kecualikan file berikut: registry.pol

Untuk mengetahui tentang semua file tersebut untuk Windows Windows 11 , 10, Windows 8, Windows 7 dan Windows Server kunjungi KB822158 .

Namun, TrendMicro tidak sepenuhnya setuju:^{(However, TrendMicro does not agree with it completely:)}

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Semoga postingan ini bermanfaat bagi Anda!

Windows files and folders you may exclude from Antivirus scans

Microsoft has рublished a Knоwlеdge Βаse article that lists down recommendations to improve performance іn Windows in an Enterprise environment when running antiviruѕ scanners. Microsoft recommends that you not scan the following files and folders with your antivirus scanner. These files are not at risk of infection. If you scan these files, serious performance problems may occur because of file locking.

In most cases, our antivirus software does not create problems while using Automatic Updates to install Windows Updates on your computer system. But there have been times when some security software have been found to block some system-critical files or interfere with the smooth working of Microsoft Updates.

If you feel that your antivirus software may be interfering with your Windows Update, you should temporarily disable it. Or then you could add some files to the Exclusion list of your security software so that these Windows Update related system files are not scanned at all.

You may set your antivirus software to not scan the files in the %windir%\SoftwareDistribution folder. These files are not at risk of infection, and so if you scan these files, problems may occur because some files may get locked.

Where a specific set of files is identified by name, exclude only those files instead of the whole folder. Sometimes, the whole folder must be excluded. Do not exclude any one of these based on the file name extension.

Files you may exclude from Antivirus scans

Microsoft Windows Update or Automatic Update related files:

1) The Windows Update or Automatic Update database file. This file is located in the following folder:

 %windir%\SoftwareDistribution\Datastore

Exclude the Datastore.edb file.

2) The transaction log files. These files are located in the following folder:

%windir%\SoftwareDistribution\Datastore\Logs

Exclude the following files:

a) Edb*.log

b) Res1.log. The file is named Edbres00001.jrs for Windows 10/8/7/Vista and Windows Server.

c) Res2.log. The file is named Edbres00002.jrs for Windows 10/8/7/Vista and Windows Server.

d) Edb.chk

e) Tmp.edb

f) The following files in the %windir%\security path should be added to the exclusions list:

•  *.edb
• *.sdb
• *.log
• *.chk

Note: If these files are not excluded, security databases are typically corrupted, and Group Policy cannot be applied when you scan the folder.

Group Policy related files:

1) Group Policy user registry information. These files are located in the following folder:

%allusersprofile%\

Exclude the following file: NTUser.pol

2) Group Policy client settings file. These files are located in the following folder:

%Systemroot%\system32\GroupPolicy\

Exclude the following file: registry.pol

To know about all such files for Windows Windows 11, 10, Windows 8, Windows 7 and Windows Server visit KB822158.

However, TrendMicro does not agree with it completely:

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Hope you find this post useful!

Related posts

• Bootable AntiVirus Rescue Disks Gratis untuk Windows 10

• Standalone Gratis On Demand Antivirus Scanners untuk Windows 11/10

• Voodooshield: perangkat lunak HIPS security anti-executable gratis untuk Windows

• Online URL Scanners ke situs web Scan untuk malware, virus, phishing, dll

• Periksa apakah komputer Anda terinfeksi oleh ASUS Update Malware

• Malwarebytes blok Program or Website; Bagaimana cara menambahkan pengecualian?

• Download McAfee Rootkit Remover Tool untuk Windows

• Emsisoft Emergency Kit: Anti-Malware Portabel Gratis

• Cara Menguji Jika Antivirus berfungsi dengan baik atau tidak pada Windows 10 PC

• Yang merupakan Windows Virus and AntiVirus pertama?

• Create media bootable menggunakan ESET SysRescue Live

• Norascan adalah pemindai anti-malware untuk Windows PC

• Crystal Security adalah Malware Detection Tool berbasis Cloud gratis untuk PC

• Cara menggunakan Malwarebytes Anti-Malware untuk menghapus Malware

• CyberGhost Immunizer akan membantu mencegah serangan ransomware

• AVG UI Gagal memuat dengan benar pada Windows 10

• Cara Mencegah Malware - Kiat untuk Mengamankan Windows 11/10

• Best Gratis Cloud Antivirus untuk Windows 10

• Malwarebytes Support Tool: Troubleshoot atau hapus instalan Malwarebytes

• Panda Free Antivirus untuk Windows 10