SoftPerfect Support Forum
All Forums
► RAM Disk & RAM File System
► Current topic
Exclusion of RAM FS process, image files and volumes from security software scans
|
Kazimierz
Exclusion of RAM FS process, image files and volumes from security software scans 06 August 2026, 23:28 |
Can RAM FS, which has a volatile volume S: and a persistent volume T: with a drip.img file saved on system shutdown, have the ramfs.exe process, the drip.img file and the S: and T: volumes excluded from scanning in ESET HOME Internet Security without compromising the security of the computer?
|
|
Re: How to exclude RAM FS process, image files and volumes from security software scans 07 August 2026, 00:00 |
Admin Registered: 12 years ago Posts: 1 151 |
Yes. Here is what each exclusion will mean:
What you should avoid is downloading or extracting material from the internet straight onto an excluded volume and then running it from there, as that is exactly the moment when the scanner would otherwise step in and protect you.
If having a dedicated fully-scanned volume for downloads is not what you want, you can maintain a reasonable level of security by excluding such volume from real-time scanning and then running on-demand scans over that entire volume at intervals and also manually scanning all downloaded files when they arrive.
- Excluded volumes
Real-time scanners charge at every file operation, and on a RAM volume that overhead can dominate the work itself. In our tests we saw cases where the scanner filter, rather than the scanning, cost most of the throughput. In ESET this means a performance exclusion for each drive, not a detection exclusion. - Excluded image file
Every save rewrites it, and the scanner would inspect that large file to no purpose, since it is a container in our own format and nothing inside can be recognised or extracted. It doesn't affect your protection. - Excluded process
All reading and writing of the image is performed on behalf of ramfs.exe, so excluding it covers the whole save and load in one step - worth having if your image is large.
What you should avoid is downloading or extracting material from the internet straight onto an excluded volume and then running it from there, as that is exactly the moment when the scanner would otherwise step in and protect you.
If having a dedicated fully-scanned volume for downloads is not what you want, you can maintain a reasonable level of security by excluding such volume from real-time scanning and then running on-demand scans over that entire volume at intervals and also manually scanning all downloaded files when they arrive.
|
Kazimierz
Re: Exclusion of RAM FS process, image files and volumes from security software scans 07 August 2026, 00:09 |