Excluding items from real-time scanning

Hi!

Official help suggests using wildcard * if one wants to exclude whole partition from real.time scanning - for example d:\*. I have 2 questions:

1. How should I create exclusion rule if I want to exclude a folder with all files and subfolders from real-time scanning? Should I use d:\test\* or d:\test\*.* ? Or do both settings do the same?

2. In above example would an application (process) run form folder d:\test or its subfolder be scanned or would it be excluded from scanning? Are exclusions meant only for file activities or do they include process activities also?

Thank you for any help.

 

see
https://www.wilderssecurity.com/showthread.php?t=316545

 

Thank you Cudni. It was a helpful link and it resolved my no.1 question. I hope that somebody can help mi with no.2.

 

I think it would include process activities in exclusion

 

The exclusion is by path. Not by process.

This is the reason why is not recommended to use 2 AVs, unless you have process exclusion in one of them.

 

I tested it with eicer test file and you are right. If I put file in excluded folder all activities are allowed (opening, running, writing...).

Thank you for your help.

 

Testing it with eicer test file it looks like process ran form excluded path is also excluded.