Running Backup and Restore on Windows 10 1909, I noticed that the backup was very slow because Windows Defender (MsMpEng.exe
) used most of the CPU time. In the Windows Defender configuration I excluded the process C:\Windows\System32\svchost.exe
, which is the process running the backup service. But that feels like a potentially dangerous overkill.
Is there a way to exclude a service (instead of a process) in Windows Defender?
svchost.exe
as it's not just one thing, but many things; excluding it makes the PC vulnerable to malware. Generally, files backed up should be scanned for malware unless independently running regular malware scans on your backup location and intend to do so prior to restoring any file from a backup. Services are executable files, so you can add the individual executables to the Windows Defender Exclude List. For the CPU usage, there's likely a way to limit that, but I'm not sure how.svchost.exe
to perform the backup? According to the service's properties, itsC:\WINDOWS\system32\svchost.exe -k SDRSVC
.svchost
man pageC:\WINDOWS\System32\SDRSVC.dll
instead ofsvchost.exe
. I found the DLL's path by looking at the backup process' properties in Sysinternals Process Monitor. On a first backup test run, this seemed to work.