Jump to content

Archived

This topic is now archived and is closed to further replies.

ronmanp

Process exclusion

Recommended Posts

Hi, 

I see Endpoint Antivirus now supports process exclusions. Could someone confirm if child-processes also get excluded from realtime scanning if the parent process is excluded? 

Thank you,

Share this post


Link to post
Share on other sites

Below is the Eset online help reference to real-time scanning exclusions:

Quote

Processes exclusions

The Processes exclusions feature allows you to exclude application processes from Real-time  file system protection. To improve backup speed, process integrity and service availability, some techniques that are known to conflict with file-level malware protection are used during backup. The only effective way to avoid both situations is to deactivate Anti-Malware software. By excluding specific process (for example those of the backup solution) all file operations attributed to such excluded process are ignored and considered safe, thus minimizing interference with the backup process. We recommend that you use caution when creating exclusions – a backup tool that has been excluded can access infected files without triggering an alert which is why extended permissions are only allowed in the real-time protection module.

Note what I underlined. A startup of a child process is not a file operation; it is an application operation. Therefore, the only way to exclude the child process from real-time scanning would be to do so by explicit full path entry of the process.

Share this post


Link to post
Share on other sites

Thank you for the fast response

Share this post


Link to post
Share on other sites

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...