since on access scanning only scans excecutables, there should be no need for most of the exclusions Microsoft recommends, except for the ones that are executables, correct? or am I completely wrong? How do you guys handle exclusions?