those of you who run realtime av - what exclusions do you set (and why)?

just wondering, those that run their av in realtime, do you set any exclusions to the realtime scanner, if so, what, and why?

thanks

 

for instance, i'm wondering should you exclude the web browser to avoid any potential slowing, since if it downloaded an infected file, the minute it hit the hard drive through the browser, the av would catch it anyway right?

 

in the past AV would slow the browser but these days it rarely happens. I would leave that on

 

Yeah, I agree. I just exclude the other security software I have running.

 

its been ages since i ran a realtime av, im doing it basically as an experiment.

so one wouldn't need to exclude for instance video transcoding software, video player, disc burners etc? im way out of the loop regarding realtime av

 

I only exclude false positives until they are fixed. I concider excluding anything else a security risk.

 

It really depends on what impact the antivirus is having on your system. This will vary between different antivirus products and different computers.

Some antivirus software can cause a very noticable drop in performance when doing some of the things you listed. But, the solution lies not in adding exclusions, but switching to a less resource hungry antivirus. For example, I'm running the free antivirus Roboscan and the impact on my system is barely noticable no matter what I'm doing.

The best suggestion I can offer is that if you want to use a paid antivirus rather than a free one, always install the trial version first, and make sure you are happy with the performance before parting with your money.

 

Heuristics can be different for web scanner so not necessarily.

 

Wouldn't this be incredibly dangerous with path rules? And hash rules would be expensive and defeat the purpose.

 

i exclude my external drive everything there is scanned before putting it there
exclude key generators once i know they're safe

 

Me too.

 

Even being an advanced user, I leave the decision in hands of my unique security solution.

 

which is?

 

im using avast, i disabled all shields except the file system shield and mail shield. file system exclusions so far are other security software, puran defragmentor, vob blanker (video transcoder)

 

i don't usually run more than a single product on my desktop. before WRSA, i would generally exclude potentially conflicting products, steamapps directory and my battlefield 3 directory to reduce scanning overhead during gameplay. with WRSA, it's not necessary since it stays out of the way.

on my laptop, i run WRSA and Outpost firewall. i exclude WRSA from protection components in outpost, and "allow" outpost in WRSA's product control. wao.

 

If the AV supports it, I add the executables for my other security applications as trusted processes, and that's about it.

 

I quoted Pegr but same comment have been made by others as well.
I do set exclusions for other security products, so they won't interfere with eachother.
I might have a overkill security solution here. (see signature).
But they ALL do run quite excellent in realtime. The reason I have emsisoft online armor in addition to ESS 5 is that Online armor has more registry control (to prevent or detect changes to "HKLM software" for instance and the ability to block or customize).
I set in online armor exclusions for MBAM, Eset smart security 5 and in eset smart security 5, I excluded Online armor, mbam.

 

Only running EAM on desktop with no exclusions set.
No problems so far.

 

I have excluded other security software, to avoid conflicts, download location for P2P software, to avoid FP's while downloading and Folding@Home working directory to avoid FP's.
In short: other security software to avoid conflicts and folders, where AV can do more harm than good if FP happens.

 

I exclude my /Steam/steamapps folder to avoid FPs and a performance hit in games.