OK I found out some things (yes I know half hour after posting prevoius post ) but I am still in dead end. Every time issue detected notification is showed, there is blocked access to some file. I found out this in windows events. Every 5-10 minutes there is an access to some windows index.dat file which is blocked by access protection rule - antivirus maximum protection .
The problem is that in this event source is unknown and I do not know which source to exclude in VSE policy ?
Any suggestions ?