HI,
We have a number of Folders on our endpoints that are excluded from the on-access scanning, namely d:\work, e:\work, f:\work etc.
We are seeing strange behaviour at times when viewing the savservice.exe process under Process Monitor that shows the process reading / accessing files in the excluded folder.
This slows down processes for us. we don't want any activity on those folders at all from the savservice.exe
The strange thing with the behaviour is that if I create the EICAR test virus file in the folder, it does not get scanned so I know that the on-access exclusion is working but why am I seeing the activity in Process Monitor?
Many thanks
Andrew.
This thread was automatically locked due to age.
