Windows 10: Windows Defender suddenly started scanning network shares

Hello,

Lately I noticed a lot of CPU and network activity after 7PM-ish while connected to the company VPN. Task Manager tells me that the top two CPU and network users are Antimalware Service Executable and the VPN daemon.

Apparently it's scanning the mapped network shares, all 30TB of 'em! Over the internet! When I unmap the drives, the activity stops immediately.

Things I've tried:

• Excluding the root folders on the drives in Defender settings.
• In elevated powershell: Code: Set-MpPreference -DisableScanningMappedNetworkDrivesForFullScan 1[/quote]
• Registry: Code: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan\DisableScanningMappedNetworkDrivesForFullScan = 1[/quote]

But to no avail.

I've been a long time microsoft user, but this "operating system" is starting to annoy me more and more. After every non-trivial update things I changed are being reset and new things start happening that have me hunting for solutions for hours. If microsoft continues this trend windows 10 will become unusable for me and I'll have to switch to Linux.

Have any of you experienced scanning network shares over VPN lately? Is it doing something else? A quick scan? I want it to completely ignore network shares.

:)

 

Network Scanning Into a Shared Folder with Windows 10

Hi Timothy,



I realize the inconvenience you are experiencing with working on shared network through Windows 10. I will certainly help you.



To assist you better, please provide us the information below:

• When you say that "networked environment using Windows10. We connect to the network via Novell", are you connected to a domain network?

Please get back to us with an update on issue with shared network on Windows 10, we will be happy to help.



Thank you.

 

offline scan by win defender

Hi,

To further assist you with your concern with Windows Defender, follow the steps below:

• Open the Run window by pressing Window + R button.
• Then type services.msc and hit "Enter".
  
• Look for Windows defender service in the list and right click on it and select start.
• Once Windows defender is opened try to do the offline scan on that window.

Let us know how it goes.