Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 851592" data-attributes="member: 32260">On my computer, WD behaves well. So, performance tweaks are not required. The policy you mentioned (&quot;Real-time scan direction&quot; policy) can be applied on Windows Home by the reg tweak:[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]&quot;RealtimeScanDirection&quot;=dword:00000001It can enhance the performance when one opens the folder with many executables. But, I did not notice any impact on the performance while copying folders with many executables.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />Whitelisting &quot;Windows&quot; and &quot;Program Files&quot; folder can have other performance advantages, because the writes to these folders are not checked. It is hard to say if the &quot;Real-time scan direction&quot; policy is safer than whitelisting system folders. In both cases, the system has to be first compromised - the rest depends on the malware. Both cases can be used to obtain malware persistence.</blockquote>

[QUOTE="Andy Ful, post: 851592, member: 32260"] On my computer, WD behaves well. So, performance tweaks are not required. The policy you mentioned ("Real-time scan direction" policy) can be applied on Windows Home by the reg tweak: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection] "RealtimeScanDirection"=dword:00000001 It can enhance the performance when one opens the folder with many executables. But, I did not notice any impact on the performance while copying folders with many executables.(y) Whitelisting "Windows" and "Program Files" folder can have other performance advantages, because the writes to these folders are not checked. It is hard to say if the "Real-time scan direction" policy is safer than whitelisting system folders. In both cases, the system has to be first compromised - the rest depends on the malware. Both cases can be used to obtain malware persistence. [/QUOTE]

Verification