Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Recommended Virus Scanning Exclusions

29 Oct 2009   #1

Windows 7 Ultimate x64
Recommended Virus Scanning Exclusions

Incase some of you are not aware Microsoft have a recommended list files/folders that should be excluded from On-Access Anti Virus scanning.

You can find the article here: Virus scanning recommendations for computers that are running Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows 2000, Windows XP, Windows Vista, or Windows 7

Here's their recommendations for Windows 2000, XP, Vista, 7, Server 2003 and Server 2008 and 2008 R2:

Microsoft Windows Update or Automatic Update related files
  • The Windows Update or Automatic Update database file. This file is located in the following folder: %windir%\SoftwareDistribution\Datastore
    Exclude the Datastore.edb file.
  • The transaction log files. These files are located in the following folder:%windir%\SoftwareDistribution\Datastore\Logs
    Exclude the following files:
    • Edb*.log

      Note The wildcard character indicates that there may be several files.
    • Res1.log. The file is named Edbres00001.jrs for Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2.
    • Res2.log. The file is named Edbres00002.jrs for Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2.
    • Edb.chk
    • Tmp.edb
    • The following files in the %windir%\security path should be added to the exclusions list:
      • *.edb
      • *.sdb
      • *.log
      • *.chk
      Note If these files are not excluded, security databases are typically corrupted, and Group Policy cannot be applied when you scan the folder. The wildcard character indicates that there may be several files. Specifically, you must exclude the following files:
      • Edb.chk
      • Edb.log
      • *.log
      • Security.sdb in the <drive>:\windows\security\database folder

Group Policy related files
  • Group Policy user registry information. These files are located in the following folder: %allusersprofile%\
    Exclude the following file: NTUser.pol
  • Group Policy client settings file. These files are located in the following folder:%Systemroot%\system32\GroupPolicy\
    Exclude the following file: registry.pol
Hope this info is helpful to some people

My System SpecsSystem Spec
29 Oct 2009   #2

Windows 7 Ultimate x64 SP1

Nice find DC187, thanks.
My System SpecsSystem Spec
29 Oct 2009   #3
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8

This is nice. But has anybody figured out how to do that in a convenient way - e.g. with Norton or SuperAntiSpyware.
My System SpecsSystem Spec

29 Oct 2009   #4

Windows 7 Ultimate x64

I'm unfamiliar with those products, I use McAfee VirusScan Enterprise myself and it's just a simple case of adding them in on an Exclusions tab.
Considering this is an article published by Microsoft I would have thought it would make sense for AntiVirus products to automatically detect the version of Windows running and apply the exclusions by default.
By adding these exclusions you reduce the chance of corrupting some of the above databases, I wonder if it due to Virus Scanning that causes some of the Windows Update errors some people suffer?

Maybe this thread should be stickied, not enough people are aware of these recommendations!
My System SpecsSystem Spec
29 Oct 2009   #5
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8

Yeah, I know. All those programs have exclusion tabs. But you have to scout one by one for all those files and put them into the list - and that is the cumbersome part.
My System SpecsSystem Spec
30 Oct 2009   #6

Windows 7 Ultimate x64 (Retail)

True it is cumbersome but with Eset AV and SS, and probably some others, once you have it set up, there is a setting that allows one to export one's customized settings (including the exclusion list) to an .xml file and reapply (i.e., import) them with a click or two when upgrading or reinstalling. So at least if that option is available, one only has to go through this pain once.
My System SpecsSystem Spec

 Recommended Virus Scanning Exclusions

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar help and support threads
Thread Forum
Is the scanning by one anti-virus sufficient?
Hi all, When a machine (say, a windows machine) is suspected to be infected by malware, is it sufficient to scan it by only one anti-virus (for example, by Kaspersky) or we should scan that machine with multiple anti-viruses? thanks.
System Security
Harddisk making virus scanning sounds, all the time.
Hey hope someone can help before I toss it out of the window. When you're scanning for virus with something like AVG the hard disk make a speficic sound, my hard disk is now making that sound all the freaking time, and it's driving me crazy! It has done it for a few days now and I can no longer...
Hardware & Devices
windows don't boot corretly after using avg free virus scanning
Hey guys i hope i can describe the condition clearly :cry: please watch the video i recorded i've try to use the recovery tools but they do not of use,details are as follow if i choose "Disable automatic restart on system...
BSOD Help and Support
Recommended software for scanning and creating PDF files.
hi, can you guys give me a recommendation of the perfect scanning software(Free or Paid software) that does both scan + creating PDF files?
Crash When Shutting Down/Restarting/Virus Scanning
It's really starting to worry me. Every time i shutdown or restart my Windows 7 Ultimate x64, it will close all programs then crash. Then my computer will turn back on and it will ask if i want to boot in safe mode, which i say no to. I thought it was a virus so I ran Comodo Virus Scanner, Which...
BSOD Help and Support
Virus Scanning
Hi all. I have a problem with scanning for viruses. i previously had problems on windows xp, now i have windows 7. and still having the same problem. When i start my virus scanner, eset nod 32, it just stops and the computer freezes. as i mentioned before, i had the same problem with windows xp,...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 15:20.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App