Well - this is mostly a philosophical discussion really, as the true question is "how paranoid do you want to be". Somewhat "how blue is the ocean" type question :).
Personally, I prefer on the side of "as paranoid as I can be, thank you very much" and don't do much in terms of exclusions, for my part.
Every exclusion you add, adds a certain amount of risk - the question is where you / your organisation feels the cut off point between AV-vulnerability and performance is :).
LANDesk EMEA Technical Lead.
I am finding that there is a definate lag on machines (IE opening and others) even with the AV scanner set as a low priority task, by which it is causing people to point fingers and disable the scanner which is obviously something we don't want.
I have the heuristics turned off. I am at a loss really on how to move forward.
The minimum machine spec we have are xw8000s with 2gb ram.