We’re not going to sit here and tell you to go without antivirus, since that would be irresponsible. What we’re going to do today is explain how you can exclude certain folders with write-heavy operations to speed up your PC without putting yourself into extra danger.
Note: Before you start excluding any files, you keep in mind that changing any of the default security settings could be risky, and you should probably close the browser tab and run away. Or maybe print off the article and burn it.
Also, the image is by xkcd
What Files Should You Exclude?
The general idea is that if you have some applications that are writing to the hard drive constantly, you should probably exclude the folders they are writing or reading from, as long as those applications are trusted and safe.
For example, if you’re using a virtual machine, which does both reads and writes from the hard drive on a fairly constant basis, you should make sure your antivirus application is not scanning those files and folders. Here’s a few examples of some things you may consider excluding:
- Virtual Machine Directories: If you’re using VMware or VirtualBox, you should make sure those locations are excluded. This is actually what prompted this article, and probably the only significant performance boost out of the things we’re mentioning.
- Subversion / TortoiseSVN Folders: Have you ever tried to do a big checkout of a source control project and had it fail? There’s a good chance that it’s conflicting with your antivirus application. This one has personally happened to me.
- Personal Photo/Video Folders: Got you have a massive library of photos or videos that you’ve taken with your digital camera? As long as you only use this location for files copied from your SD card, there’s no reason to be scanning it and slowing your PC down while doing photo editing.
- Legitimate Music Folders: If you’re downloading music from shady sources, this does not apply. If you’ve ripped your own CDs or downloaded from somewhere legitimate like Amazon, then you can safely exclude your music folder.
- Windows Update Folders: This actually comes straight out of a Microsoft KB article—you’ll notice that they don’t recommend it, because they can’t do that in case somebody writes a special virus for the purpose of suing them, but the same principle applies.
Other Scenarios
There’s a nearly infinite number of applications and scenarios for everybody’s PC, so it’s hard to say exactly what is going to work on your PC—but there’s a way you can figure it out for yourself using Process Monitor, the great tool from Sysinternals at Microsoft.
Just open up Process Monitor, and then “uncheck” all of the little icons on the right-hand side of the toolbar, leaving only the “Show File System Activity” one checked. At this point you’ll see loads and loads of items in the list, with every access to the file system.
You can use this data to figure out which applications are constantly reading and writing to the hard drive, and then based on the safety of those files, you can choose whether or not to exclude them.
Don’t Exclude File Types, Exclude Folders
When you exclude a filename or file extension, you are telling your antivirus software to completely ignore those files anywhere on your system, which could cause a security problem. It’s a much better bet to exclude a particular folder that you know is safe, like your virtual machine folders.
Always Scan Files from the Internet
I’ll start by saying this should go without saying… which always seems to be said anyway… but you should make absolutely certain to scan any files that come from anywhere on the internet, and especially when those files come from torrents or other similar sources rife with viruses.
All Antivirus Applications Work Differently
The next thing to mention is that not every antivirus application is going to work the same way—for instance, by default, AVG only scans a specific set of file extensions, and files with no extensions. There’s no way to tell—without benchmarking, at least—whether excluding folders will make a performance difference if they don’t scan those extensions.
Some other anti-virus applications, however, don’t limit themselves to specific file types, so you’ll need to dig into the settings for your particular application.
Excluding Files from Microsoft Security Essentials
Microsoft Security Essentials makes it real simple to exclude files—just head into the Settings, choose Excluded files & locations on the left-hand side, and then add folders into the list on the right-hand side.
You’ll probably notice that MSE doesn’t slow your system down very much anyway.
Excluding Files from AVG Anti-Virus
As we mentioned earlier, AVG works a little differently—if you head into Tools –> Advanced settings…
Then head to Resident Shield –> Advanced Settings to see the list of file types that are currently being scanned. You’ll notice that AVG always scans files with no extensions, which shouldn’t normally pose a problem, but depending on the applications you’re using there might be a problem.
You can switch to the Resident Shield –> Excluded Items to add in folders or specific files to exclude from scanning.
Excluding Files from Eset NOD32 Antivirus
Open ESET Smart Security or ESET NOD32 Antivirus.
Press the F5 key to display the Advanced Setup window.
From the Advanced Setup tree, click Computer -> Antivirus and antispyware -> Exclusions and then click the Add... button .
We’re not going to cover every other antivirus application, but they all pretty much work the same. Also, we prefer Microsoft Security Essentials.
source
No comments :
Post a Comment