When you browse a network file share that contains many
malicious files, an error may occur that causes the Microsoft Forefront Client
Security kernel-mode mini-filter to unload. Additionally,
event that resembles the following may
be logged in the System log:
Log Name: System
Date: Date Time
Event ID: 1
Task Category: None
Computer: <Computer Name>
File System Filter 'MpFilter' (Version 6.0, 4/23/2008 2:58:29 AM) unloaded successfully.
There is a timing issue with
the filter manager communication channel that Forefront Client Security uses to
communicate between its kernel-mode mini-filter and the scanning service. This
issue may result in unexpected errors, such as the following error:
When this error occurs, it causes the mini-filter to
Type 956280 in the
Search box, and then click Search.
Click Add to add the hotfix to the
Near the search bar at the top, click the view
Click Browse, specify the folder to which
you want to download the hotfix, and then click OK.
Click Continue, and then click I
Accept to accept the Microsoft Software License Terms. The hotfix
starts to download.
Wait until the hotfix is downloaded to the specified
location, and then click Close.
Known issue with this update
When you use Windows Update to
install updates on a computer that is running a Server Core installation of
Windows Server 2008, this hotfix may not be installed.
information, click the following article number to view the article in the
Microsoft Knowledge Base:
The update for Forefront Client Security (update 952265) may not be installed on a Server Core installation of Windows Server 2008 when you use Windows Update
There are no prerequisites for
installing this hotfix.
You must restart
the computer after you apply this hotfix.
Hotfix replacement information
This hotfix replaces the hotfixes that are described in the
Microsoft Knowledge Base (KB) articles, KB952265 and KB938054.
The English version of this hotfix has the file
attributes (or later file attributes) that are listed in the following table.
The dates and times for these files are listed in Coordinated Universal Time
(UTC). When you view the file information, it is converted to local time. To
find the difference between UTC and local time, use the Time
Zone tab in the Date and Time item in Control