Microsoft ayaa daabacday maqaal Saldhig^{(Knowledge Base)} Aqooneed kaas oo taxaya talooyinka lagu wanaajinayo waxqabadka Windows ee jawiga ganacsiga^(Enterprise) marka uu socdo iskaanka fayraska. Microsoft waxay ku talinaysaa inaadan ku sawirin faylalka iyo faylalka soo socda iskaankaga ka hortagga. ^{(Microsoft recommends that you not scan the following files and folders with your antivirus scanner.)}Galalkani khatar uma hayaan caabuq Haddii aad sawirto galalkan, waxaa dhici karta in dhibaato hawleed aad u daran ay ku dhacdo xiritaanka faylka.

Inta badan, software-ka-ka-hortagga-yagu ma abuuro dhibaatooyin marka la isticmaalayo Cusbooneysiin^(Automatic) Toos ah si loogu rakibo Cusbooneysiinta Windows^{(Windows Updates)} -ka nidaamka kombiyuutarkaaga. Laakiin waxaa jiray waqtiyo markii software-yada amniga qaarkood la helay inay xannibaan qaar ka mid ah faylalka nidaamka-muhiimka ah ama ay farageliyaan habsami u socodka shaqada Microsoft Updates .

Haddii aad dareento in software-kaga ka-hortaggaaga laga yaabo inuu faragelinayo Cusboonaysiinta Windows-^{(Windows Update)} kaaga , waa inaad si ku-meel-gaar ah u joojisaa. Ama markaas waxaad ku dari kartaa qaar ka mid ah faylalka liiska ka saarida^(Exclusion) ee software-kaaga amniga si aan faylalka nidaamka Cusbooneysiin Windows -ka aan gabi ahaanba loo sawirin.^{(Windows Update)}

Waxa laga yaabaa inaad dejiso software-ka ka-hortaggaaga si aanu u baadhin faylasha ku jira %windir%SoftwareDistribution galka. Faylashani khatar uguma jiraan infekshanno, sidaas darteed haddii aad iskaan karto faylashan, dhibaatooyin ayaa dhici kara sababtoo ah faylasha qaar ayaa laga yaabaa inay xidhmaan.

Meesha qayb gaar ah oo faylal ah lagu aqoonsaday magac ahaan, ka saar oo keliya faylashaas halkii aad ka ahaan lahayd galka oo dhan. Mararka qaarkood, faylka oo dhan waa in meesha laga saaraa. Ha ka saarin mid ka mid ah kuwan iyadoo lagu salaynayo kordhinta magaca faylka.

Faylasha aad ka saari karto iskaanka^(Antivirus) fayraska

Cusbooneysiinta Windows^{(Microsoft Windows Update)} ama Faylasha La Xiriira Cusbooneysii Toos ah:^{(Automatic Update)}

1) Faylka database-ka ee Windows Update ama Cusbooneysii toos ah. ^{(The Windows Update or Automatic Update database file.)}Faylkan waxa uu ku yaalaa galkan soo socda:

 %windir%\SoftwareDistribution\Datastore

Ka saar faylka Datastore.edb

2) Faylasha diiwaanka wax kala iibsiga. ^{(The transaction log files.)}Faylashani waxay ku yaaliin galkan soo socda:

%windir%\SoftwareDistribution\Datastore\Logs

Ka saar faylasha soo socda:

a) Edb*.log

b) Res1.log . Faylka waxaa loo magacaabay Edbres00001.jrs ee Windows 10/8/7/Vista iyo Windows Server .

c) Res2.log . Faylka waxaa loo magacaabay Edbres00002.jrs ee Windows 10/8/7/Vista iyo Windows Server .

d) Edb.chk

e) Tmp.edb

f) Faylasha soo socda ee ku jira %windir%\security waa in lagu daraa liiska ka reebista:

•  *.edb
• *.sdb
• *.log
• *.chk

Fiiro gaar ah:^(Note:) Haddii faylashan aan laga saarin, kaydadka amniga ayaa sida caadiga ah kharribmay, iyo Siyaasadda Kooxda^{(Group Policy)} lama dabaqi karo marka aad iskaanayso galka.

Faylasha la xiriira siyaasadda kooxda:^{(Group Policy related files:)}

1) Macluumaadka diiwaanka isticmaalaha Siyaasadda Kooxda^{(Group Policy user registry information)} . Faylashani waxay ku yaaliin galkan soo socda:

%allusersprofile%\

Ka saar faylka soo socda: NTUser.pol

2) Faylka habaynta macmiilka Siyaasadda Kooxda. ^{(Group Policy client settings file. )}Faylashani waxay ku yaaliin galkan soo socda:

%Systemroot%\system32\GroupPolicy\

Ka saar faylka soo socda: registry.pol

Si aad u ogaato dhammaan faylasha noocaas ah ee Windows 11^{(Windows Windows 11)} , 10, Windows 8, Windows 7 iyo Windows Server booqo KB822158 .

Si kastaba ha ahaatee, TrendMicro si buuxda uguma raacsana:^{(However, TrendMicro does not agree with it completely:)}

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Waxaan rajeynayaa inaad qoraalkan faa'iido u yeelan doonto!

Windows files and folders you may exclude from Antivirus scans

Microsoft has published a Knowledge Base article that lists down recommendations to improve performance in Windоws in an Enterprisе environment when running antivirus scаnners. Microsoft recommends that you not scan the following files and folders with your antivirus scanner. These files are not at risk of infection. If you scan these files, serious performance problems may occur because of file locking.

In most cases, our antivirus software does not create problems while using Automatic Updates to install Windows Updates on your computer system. But there have been times when some security software have been found to block some system-critical files or interfere with the smooth working of Microsoft Updates.

If you feel that your antivirus software may be interfering with your Windows Update, you should temporarily disable it. Or then you could add some files to the Exclusion list of your security software so that these Windows Update related system files are not scanned at all.

You may set your antivirus software to not scan the files in the %windir%\SoftwareDistribution folder. These files are not at risk of infection, and so if you scan these files, problems may occur because some files may get locked.

Where a specific set of files is identified by name, exclude only those files instead of the whole folder. Sometimes, the whole folder must be excluded. Do not exclude any one of these based on the file name extension.

Files you may exclude from Antivirus scans

Microsoft Windows Update or Automatic Update related files:

1) The Windows Update or Automatic Update database file. This file is located in the following folder:

 %windir%\SoftwareDistribution\Datastore

Exclude the Datastore.edb file.

2) The transaction log files. These files are located in the following folder:

%windir%\SoftwareDistribution\Datastore\Logs

Exclude the following files:

a) Edb*.log

b) Res1.log. The file is named Edbres00001.jrs for Windows 10/8/7/Vista and Windows Server.

c) Res2.log. The file is named Edbres00002.jrs for Windows 10/8/7/Vista and Windows Server.

d) Edb.chk

e) Tmp.edb

f) The following files in the %windir%\security path should be added to the exclusions list:

•  *.edb
• *.sdb
• *.log
• *.chk

Note: If these files are not excluded, security databases are typically corrupted, and Group Policy cannot be applied when you scan the folder.

Group Policy related files:

1) Group Policy user registry information. These files are located in the following folder:

%allusersprofile%\

Exclude the following file: NTUser.pol

2) Group Policy client settings file. These files are located in the following folder:

%Systemroot%\system32\GroupPolicy\

Exclude the following file: registry.pol

To know about all such files for Windows Windows 11, 10, Windows 8, Windows 7 and Windows Server visit KB822158.

However, TrendMicro does not agree with it completely:

Following the recommendations does not pose a significant threat as of now but it has a very big potential of being one. Cybercriminals may strategically drop or download a malicious file into one of the folders that are recommended to be excluded from scanning or use a file name extension that is also in the excluded list. We find it sensible for users to aim for better system performance. However, we also think that excluding certain file types or folders from anti virus scanning is not something novice users should tinker with. Doing so may expose the system to risks that can lead to an inconvenience far more severe than a slightly slower system. In line with this, we advise users to educate themselves fully about these recommendations before taking any action. We recommend users not to exclude any file unless there is a critical reason to do so and be aware of the risks entailed by such an action.

Hope you find this post useful!

Related posts

• Diskiyada Samatabbixinta Kahortagga Virus-ka ee Bilaashka ah ee Windows 11/10

• Kali-taliye Bilaash ah oo Baahida Iskaaneriyeyaasha Kahortagga Fayraska ee Windows 11/10

• VoodooShield: Software-ka HIPS ee amniga ka-hortagga ah ee bilaashka ah ee Windows

• Sawir-qaadayaasha URL-yada si ay u baadhiyaan mareegaha internetka ee malware, fayraska, phishing, iwm

• Hubi haddii kombuyuutarkaaga uu ku dhacay ASUS Update Malware

• Software-ka ugu fiican ee ka hortagga jabsiga ee bilaashka ah ee Windows 11/10

• SmadAV - Nadiifiyaha nidaamka bilaashka ah iyo ka-hortagga USB-gaaga

• Qalabka Degdegga ah ee Emsisoft: Malware-ka-hortagga la qaadi karo oo bilaash ah

• Sida loo isticmaalo Malwarebytes Anti-Malware si meesha looga saaro Malware

• Bitdefender Free Antivirus Edition oo loogu talagalay Windows 10

• Eset Rogue Applications Remover, oo ah Qalab ka saarida Rogue bilaash ah

• Bilowga Hore ee Tignoolajiyada Ilaalinta Anti-Malware (ELM) gudaha Windows 10

• Kaspersky Free Antivirus ee Windows 10 PC

• Abuur warbaahinta la kicin karo adigoo isticmaalaya ESET SysRescue Live

• Hagaaji Malwarebytes CPU sare iyo isticmaalka xusuusta Windows 11/10

• Kahortagga fayraska xannibaya Soo dejinta, Website-ka, Kamarada, Barnaamijka, Internetka, iwm.

• Sida loo tijaabiyo in Antivirus-ku si fiican ugu shaqeeyo iyo in kale Windows PC

• Qalabka Ka-saarta Ka-hortagga Virus-ka & Uninstallers-ka ee barnaamijyada AntiVirus

• Sida loo isticmaalo Avast Boot Scan si looga saaro Malware-ka Windows PC

• Kahortagaha Cloud ee bilaashka ah ee ugu fiican Windows 10