Microsoft Security Essentials

  • Scanning, Detecting, and Removing Threats
  • Microsoft Security Essentials
  • All forums
Question

How can I exclude mapped network drive in security essentials 'full scan' mode?

How can I exclude mapped network drive in security essentials 'full scan' mode?
There is no possibility to exclude mapped locations in 'Excluded files & locations', only local disks. In 'Advanced' tab -> 'Scan removable drives' checkbox if switched off. And when I start 'full scan', all mapped drives also scanned.
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation
13 People had
this question

Was this helpful?

2

Votes

Answer

One more thing...

You can manually exclude scanning of network files by going to :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Antimalware\Scan  in Start > Run > regedit

[You may have to change the permissions on the key by taking the ownership of the key from advanced tab and give write permissions to yourself]

Right click > New DWord value

Set the value to be 1
Set the name to be DisableScanningNetworkFiles

So the key should look like this

DisableScanningNetworkFiles            REG_DWORD      0x00000001 (1)

Let me know if this solves the problem... Else we would need to consider adding a feature like this - if it indeed turns out to be a significant issue.

Sincerely,
~Shiroy Choksey [MSFT]
This posting is provided "as is" with no warranties, and confers no rights.
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Was this helpful?

2

Votes

Answer

It is not possible to exclude mapped drives, since drives are mapped in the context of the user, (in case there are multiple users on the system) while MSE works in the context of the system. You could, however, exclude the actual network paths to which these drives point, which would result in MSE excluding these drives.

To do this you would have to make some changes to the registry as explained below.

You can manually exclude a network share by going to :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Antimalware\Exclusions\Paths  in Start > Run > regedit

[You may have to change the permissions on the key by taking the ownership of the key from advanced tab and give write permissions to yourself]

Right click > New DWord value

Set the value to be 0
Set the name to be the share you are trying to exclude.

\\server\share : 0

By default we should *not* be scanning mapped network drives - I will investigate this further and see what could be the problem.

Sincerely,
~Shiroy Choksey [MSFT]

    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Was this helpful?

1

Vote

Custom Scan, on the HOME tab?

Doc
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Dr. Strangelove

^STOP AUTOMATIC AWARDS^

Computers verified since 1972

Was this helpful?

Settings, Excluded files & locations.  Click the Add button and it is pretty self explanatory.

I like this feature, mainly because I can be a control freak.  I play World of Warcraft and I choose to trust Blizzard, so I exclude my World of Warcraft folder from scanning and even exclude the wow.exe process from the scan.
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Was this helpful?

Settings, Excluded files & locations.  Click the Add button => there is no option to write in or select mapped network drive.
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Was this helpful?

I just mapped a drive from another machine on my network.  As I guessed above, go to the HOME tab, and select CUSTOM.  Then, select the drives you want, or uncheck the drives you do not, including your network mapped drive.

Doc
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Dr. Strangelove

^STOP AUTOMATIC AWARDS^

Computers verified since 1972

Was this helpful?

Vaanoor, this is not an answer to the question. Mapped drives do not appear here.
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Was this helpful?

Vaanoor, this is not an answer to the question. Mapped drives do not appear here.

At the moment, I believe you are correct, Daniel.
I just set up a mapped drive and have started a full scan to see if it scans it, though it should not, in my opinion.
When I select Custom Scan, only C is selected, not the mapped drive.
Quick scan doesn't touch the mapped drive.
Settings/Excluded locations does *not* provide the option to exclude a mapped drive since only the C: drive is shown.
Personally, I never map drives any more, preferring to use the nomenclature \\server\path to access network resources.
I'll update here later to advise my observation on the results of my full scan.
-steve
Microsoft MVP Windows Live / Windows Live OneCare, Live Mesh, & MS Security Essentials Forums Moderator
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Stephen Boots

Community Moderator
Microsoft MVP Windows Live

Was this helpful?

Well, it appears that a "Full Scan" does indeed go after the mapped drives. It appears to have completed the local drive and then looked to me like it was stuck. The elapsed time had not changed and the CPU usuage was minimal. There was some activity, though. The file it said it was scanning was located on the C: drive. When I unplugged the network cable, the scan completed.
So, the advice that I'd give at this point is don't do a "Full Scan" when you have mapped drives, but select the Custom Scan or Quick Scan options. Of course, that isn't a choice for the scheduled scan, so you'd need to run the custom scan manually.

-steve
Microsoft MVP Windows Live / Windows Live OneCare, Live Mesh, & MS Security Essentials Forums Moderator
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Stephen Boots

Community Moderator
Microsoft MVP Windows Live

Was this helpful?

2

Votes

Answer

It is not possible to exclude mapped drives, since drives are mapped in the context of the user, (in case there are multiple users on the system) while MSE works in the context of the system. You could, however, exclude the actual network paths to which these drives point, which would result in MSE excluding these drives.

To do this you would have to make some changes to the registry as explained below.

You can manually exclude a network share by going to :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Antimalware\Exclusions\Paths  in Start > Run > regedit

[You may have to change the permissions on the key by taking the ownership of the key from advanced tab and give write permissions to yourself]

Right click > New DWord value

Set the value to be 0
Set the name to be the share you are trying to exclude.

\\server\share : 0

By default we should *not* be scanning mapped network drives - I will investigate this further and see what could be the problem.

Sincerely,
~Shiroy Choksey [MSFT]

    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Was this helpful?

I wonder if make a short cut of the location of the mapped drive then exclude it works?

Don't have time to try ATM just saying...
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation

Was this helpful?

If I want to exclude my entire WHS, named WHS1, will \\WHS1 work? Or do I have to name each share explicitly?
    • Child exploitation or abuse
    • Harassment or threats
    • Inappropriate/Adult content
    • Nudity
    • Profanity
    • Software piracy
    • SPAM/Advertising
    • Virus/Spyware/Malware danger
    • Other Term of Use or Code of Conduct violation
<< PreviousPage of 4 Next >>

Message marked as answers cannot be deleted

To delete this message, first unmark this message as an answer, then delete it.

Reason to remove escalation


Merge

Enter the thread ID of the thread you are merging into


Reply will be posted to a public thread

You are replying to a public portion of this thread. To reply privately, click Cancel, click the Private Messages tab, and Reply on that private message.

Don't show this message again

To report abuse, sign in or continue without signing in

Thank you.

Report abuse

Abuse type:

Details (optional):

Report abuse

Abuse type:

Details (required):
Enter the characters you see (required):
Type the numbers that you see in the picture.
Play audio and type the numbers that you hear.
Show a different picture.

Sign in

Hotmail, Xbox Live, Messenger, or msn accounts will also work.

Don't have one of the above accounts?

Signing in...
This page will automatically update after you are signed in.
If you are having problems, you can close this message and try to connect again.