On 12/02/2021 12:31 am, Lionel Bouton wrote:
> I haven't dealt with a Windows environment for quite some time, but from
> what I remember an antivirus installs a driver intercepting file
> accesses and these drivers are still active even if you disable the
> antivirus (I suppose they just call a noop instead of content analysis
> code) and can still interfere with your system. For example some years
> ago I've seen what looked like a race condition involving rename for
> MySQL on Windows that could not be fixed by disabling the antivirus but
> could by uninstalling it completely.
>
> You might want to uninstall the antivirus temporarily to check this.
Thanks Lionel for this suggestion. Its the built-in Windows Defender AV
which I believe can't be uninstalled, so am limited to 'disabling' it
(plus it has exclusions for the PG directories & processes already).
Using Procmon I can't see any AV file activity when it is disabled. Will
keep monitoring it though.
Kind regards
Guy