????? ????? ???? ??? ??? ??????? ?? ???? ?????? ??????? ?????? Forefront Client Security

???? ???????: 971026 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???????? ????? ????? ??????? ?????? ?????? ???????
????? ???? | ?? ????

?? ??? ??????

???? ??? ??????? ???????? ?????? ?????? ??????? ?????? Microsoft Forefront Client ?????? (FCS) ???? ??? ??????? ?? ???? ????????? ??????? ?? Forefront Client Security.
???? ??? ?????? | ????? ???????

????? ???

???????? ???? ???? ???? ????????? ??????? ??? ??? ?????

??????? ??????

??? evolved ???? ??????? ?????? ???? ????? ?????? ????? ????? ?? ??????? ?????? ???? ???? ?????.
?????
??? ????? ????? ????? ????? ?? ??????? ?????? ??????? ??? Forefront Client Security. ??? ????? ??? ??????? ?????? ?????? ??? ??????? ???????. ????? ??? ??????? ?????? ??????? ??? ?????? ????? ??? kernel Forefront Client Security.

??????? 2

??? ????? ???? "???????? ???????" ?? ????? ???????? ?????? ??????? ?????? ??? ?????? ??? ???? ??????? ???? ????? ??????? Windows 2000 ??? ??? ?????? ?? ???? ??? ????? Windows.
?????
?????? ??? ??????? ?????? ????? ??????? ????????? ?? COM ?? ???? "???????? ???????". ???? ??????? ??? ????? ?????? ?? Windows 2000 ???. ???? ??? ??????? ??? ?????? "???????? ???????" ??????? ??? ??????.

??????? 3

??? ????? ?? ?? ???? ??? ????????? MpCmdRun.exe - ???? ????? ???? ??????? "?" ???? ????????? ? ?? ??? ????? ??? ?????? ?????? ??? ??? ????? ???????. ?? ???? ?? ????? ???? mini-filter ??? kernel.
?????
??? ????? MpCmdRun.exe - ???? ?????? ???? ??????? "?" ???? ?????????. ??? ????? ?????? mini-filter ??? kernel ?????? ?????? ?????? ??? ??? ????? ??????? ??? ????.

??????? 4

???? forefront Client Security ????? ??? ????? ??????? ??????? ?? ????? ???? ??????? ??? ????? ??? ????????? ?????? ???? ????? ????????. ??? ?? ?????? ?????? ?? ????? ????? ???????? ???????:
939361
(http://support.microsoft.com/kb/939361/ )
forefront Client Security ????? ??? ????? ????? ??????? ??????? ?? ????? ???? ??????? ??? ????? ??? ???? ?? ??????? ????
?????
??? ?? ?? ?? ??????? ?????? ????? ???? ??? ???? ???? Forefront (FCS) ??? ???? ????? ???? FCS. ??? ????? ????? ?? ???? FCS ???? ????? ???????? (.lnk). ???? ????? ?????? ???? ????????? ?? ???? ???? ???? ????????. ??? ??? ?????? ??? ????????? ?????? ????? ?????? ????? ?????? ?????? ????. ??? ??? ?????? ???? ???? ????? ?????? ?? ????? ??????.

?? ????? ??? ???? ???? ?????? ?? ??????? ????? ???? 2009 1.1.4701.0 ? ???? ?? ?????? ?? ??????? ????? 1.59.3.0. ???? ???????? ?? ??? ????? ???????? ?????? ???? ??????. ?????? ??? ?????? ???? ????? ???? ????????? ???????:
  • ?? ?????? ????? ????? ????? 1.59.3.0 ?? ????? ????.
  • ????? ????? ?????? ?????? ??????? ?????? ???? ?? ??????? ?? ??? ???????.
  • ????? ????? ????? ????? ??????? ?? ??? "More Information" ?? ??? ???????.

??????? 5

??? ???? ????? ???? ???? ????? ??? ????, ??????? ?????? ?? ????? ???? ???? detections ???????? ?????? ??????? ???????.
?????
?? ????? ??? ??????? ???? ?? ???? detections ??? ???? ????? ???? ???? ????? ??? ???? detections ??????? ?? ??????? ??? ????????.

??????? 6

???? ??????? 7 Windows ???? ????? "??????? ?? ???????": ? Forefront Client Security ??? ???? ?? ????? ??? ???? ???? Windows ?? ????? ?? ??? ???????. ??????? ???? ??????? ???????? ???????? ?? ???? ??????? ???????? ?????? ??? ????? ????. ?
?????
????? ??? ??????? ??? ????????? ?? ????? ????? ?? ???? ???? Windows Forefront Client Security ? ????? ?? ??? ?????? ??? Windows 7.
???? ??? ?????? | ????? ???????

??????? ??????? ??????

????? ????? ???? ????? ?? Microsoft.

?????? ????? ??? ??????? ?????? ?? Microsoft Update ?Windows Server Update Services ???. ??? ??? ???? ?? ?????? ??? ????? ??????? ???????? ????? ????? ???? ??????? ???????:
  1. ?? ?????? ???? "?????? Microsoft Update ??? ?????" ???????:
    http://catalog.update.microsoft.com/v7/site/Home.aspx
    (http://catalog.update.microsoft.com/v7/site/Home.aspx)
  2. ???? 971026 ?? ?????? ??? ?? ???? ??? ???.
  3. ???? ??? ????? ?????? ??????? ?????? ??? ???.
  4. ?????? ?? ???? "?????" ?? ????? ?????? ???? ??? ???????? ??? ????? ?????.
  5. ???? ??? ?????.
  6. ???? ??? ??????? ? ??? ?????? ???? ???? ????? ??????? ?????? ?? ???? ??? ?????.
  7. ???? ??? ?????? ? ?? ???? ??? ???? ????? ???? ????? ????? Microsoft. ???? ????? ??????? ??????.
  8. ????? ??? ??? ????? ??????? ?????? ??? ?????? ?????? ??? ?? ???? ??? ?????.

??????? ???????? ?? ??? ???????

?? ?? ??? ????? ??? ??????? ?????? ??? ??????? Windows Update ?????? ????????? ??? ???? ??????? ???? ?????? ????? ??????? Server ?? Windows Server 2008. ?????? ??? ???? ?? ????????? ??? ??? ???????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
955884
(http://support.microsoft.com/kb/955884/ )
??????? ????? Forefront Client Security (??????? 952265) ?? ?? ??? ????? ??? ????? ??????? Server ?? Windows Server 2008 ??? ??????? Windows Update

????????? ????????

?? ???? ??? ??????? ????? ?????? ??? ??????? ??????.

????? ????? ?????

??? ????? ????? ????????? ??? ????? ??? ??????? ??????.

??????? ??????? ??????? ??????

??? ??? ??????? ?????? ??? ????????? ??????? ???????:
952265
(http://support.microsoft.com/kb/952265/ )
?? ???? ??? ?? ???????? ??? ??????? ???? Forefront Client Security ?????
938054
(http://support.microsoft.com/kb/938054/ )
????? ????? ???? ??? ??? ??????? ?? ???? Forefront Client Security
956280
(http://support.microsoft.com/kb/956280/ )
????? ????? mini-filter ??? kernel Forefront Client Security ??? ??????? ?????? ??? ???? ????? ???? ????? ??? ?????? ?? ????? ????

??????? ?????

?????? ????? ????? ?????????? ?? ???? ????????? ??????? ??? ??? ????? ???? Microsoft Windows Installer ?????? ???? ????????? ???????. ??? ??? ???????? ???????? ?????? ???? ??????? ?? "??? ??????? ???????" (UTC) ?? ?????? ??????. ????? ???? ???? ??????? ?????? ??? ????? ??????? ??? ??????? ??????. ?????? ????? ??? ??????? ??????? (UTC) ???????? ??????? ?????? ????? ??????? ??????? ??????? ?? ???? ??????? ?????? ?? "???? ??????".

???? ???? forefront x 86-based ?????????

?? ??? ??????????? ??? ??????
??? ?????????? ???????? ???????????????
Amhelp.chm??? ???? ???????65,21628 ?????? 200817: 55
Mpasbase.vdm1.0.0.0572,72028 ?????? 20085: 58
Mpasdesc.dll1.5.1972.049,02403 ????? ????10: 48
Mpasdlta.vdm1.0.0.09,00828 ?????? 20085: 58
Mpavbase.vdm1.0.0.0204,62428 ?????? 20085: 58
Mpavdlta.vdm1.0.0.09,04028 ?????? 20085: 58
Mpavrtm.dll1.5.1972.0128,36803 ????? ??????: ??
Mpclient.dll1.5.1972.0366,44803 ????? ??????: ??
Mpcmdrun.exe1.5.1972.0349,04803 ????? ??????: 26
Mpengine.dll1.1.3520.03,308,62428 ?????? 2008??: ??
Mpevmsg.dll1.5.1972.023,42403 ????? ????10: 48
Mpfilter.sys1.5.1969.069,61615 ???? 200917: 35
Mpoav.dll1.5.1972.092,01603 ????? ??????: ??
Mprtmon.dll1.5.1972.0730,99203 ????? ??????: ??
Mpsigdwn.dll1.5.1972.0129,92003 ????? ??????: ??
Mpsoftex.dll1.5.1972.0518,01603 ????? ??????: ??
Mpsvc.dll1.5.1972.0304,51203 ????? ??????: ??
Mputil.dll1.5.1972.0177,02403 ????? ??????: ??
Msascui.exe1.5.1972.01,033,60003 ????? ??????: ??
Msmpcom.dll1.5.1972.0221,04003 ????? ??????: ??
Msmpeng.exe1.5.1972.016,88003 ????? ??????: 26
Msmplics.dll1.5.1972.09,08803 ????? ??????: ??
Msmpres.dll1.5.1972.0766,33603 ????? ????10: 48

???? ???? forefront x ????????? ???? ????? ??? 64

?? ??? ??????????? ??? ??????
??? ?????????? ???????? ???????????????
Amhelp.chm??? ???? ???????65,21628 ?????? 200817: 55
Mpasbase.vdm1.0.0.0572,72028 ?????? 20085: 58
Mpasdesc.dll1.5.1972.049,52004 ????? ????00: 36
Mpasdlta.vdm1.0.0.09,00828 ?????? 20085: 58
Mpavbase.vdm1.0.0.0204,62428 ?????? 20085: 58
Mpavdlta.vdm1.0.0.09,04028 ?????? 20085: 58
Mpavrtm.dll1.5.1972.0154,49604 ????? ????00: 17
Mpclient.dll1.5.1972.0546,68804 ????? ????00: 17
Mpcmdrun.exe1.5.1972.0504,60804 ????? ????00: 15
Mpengine.dll1.1.3520.04,431,95228 ?????? 2008??: ??
Mpevmsg.dll1.5.1972.023,40804 ????? ????00: 36
Mpfilter.sys1.5.1969.088,94415 ???? 200917: 35
Mpoav.dll1.5.1972.0117,63204 ????? ????00: 17
Mprtmon.dll1.5.1972.01,181,05604 ????? ????00: 17
Mpsigdwn.dll1.5.1972.0179,58404 ????? ????00: 17
Mpsoftex.dll1.5.1972.0791,42404 ????? ????00: 17
Mpsvc.dll1.5.1972.0416,12804 ????? ????00: 17
Mputil.dll1.5.1972.0247,16804 ????? ????00: 17
Msascui.exe1.5.1972.01,636,73604 ????? ????00: 17
Msmpcom.dll1.5.1972.0305,53604 ????? ????00: 17
Msmpeng.exe1.5.1972.016,36804 ????? ????00: 15
Msmplics.dll1.5.1972.09,08804 ????? ????00: 17
Msmpres.dll1.5.1972.0764,28804 ????? ????00: 36
???? ??? ?????? | ????? ???????

??????? ????

???? ???????? ?? ??? ????? ?????? ????? ?????? ?????? ???????? ??????? ?? ??? 4 ???????. ?????? ??? ?????? ??? ????? ?? ????? ???? ? ??????? ?????? ?? ??? ???????. ??? ????? ??? ????????? ??? ??? ????? ??? ?????? ??? ????? ?????? ????????? ????? ??. ???? ??? ??? ????? ??? ????? ?????? ?? ?? ???? "Active Directory" ???????? ??? ????? ?????? (ADM) "??? ????????". ??????? ????? ??? ????? ????? ?????? ??? ???? ???? ????? Forefront Client Security. ??? ???? ???? ???? ??????? ??? ??? ??? ??? ??????? Fcslocalpolicytool.exe ?????? ?????.

????? ????? ?????

???? ????? ?????? ??? ???????? ????????.

?????? 1: ??? ????? ???????? ??? ????? ADM

  1. ????? ??? ????? ?????? "???? ????????".
    1. ??? ????? "???????".
    2. ??? ?? ?? ???? ??????? ??????? ?? ???????: 
      CLASS MACHINE
CATEGORY !!FCSCategory
	POLICY !!NetworkScan_Name
		KEYNAME "SOFTWARE\Policies\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Scan"
		EXPLAIN !!NetworkScan_Explain

		VALUENAME DisableScanningNetworkFiles
		  VALUEON NUMERIC 1
		  VALUEOFF NUMERIC 0
	END POLICY
END CATEGORY

[strings]
FCSCategory="Microsoft FCS Scan Configuration"
NetworkScan_Name="Disable Network Scan"
NetworkScan_Explain="This setting instructs the FCS antimalware client not to scan referenced network locations."
    3. ?? ??????? ???? ???? ??? ??? ????.
    4. ??? ???? ?? ???? KB971026.adm ?? ?????? ??? ?????.
    5. ?? ?????? ??? ???? ? ?? ???? ??? All Files (*. *).
  2. ??????? ??? ??????? ???????? "??? ???????? ???? ???
    1. ??? ????? KB971026.adm ?? ???? ????? ?????????? ??? ?????. ?????? ??? ???? ?? ????????? ??? ????? ????? ????? ADM ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
      816662
      (http://support.microsoft.com/kb/816662/ )
      ?????? ?????? ????? ??????? ???????? (.adm) "??? ????????"
    2. ??? ???? ??? ???????? ?????? ??????? ?? ?????? ??????? ??? "Active Directory". ???? ???? ??? ????? ??? ??? ??? ???? ??? ???????? ??????? "??" ??????? Active Directory "?" ????? ????????? "??" Console(GPMC) ????? ??? ????????.
    3. ?? ?????? ????? ?????????, ???? ??? ?????? ?????? ??? ????? ???????, ???? ??? ?????/????? ????.
    4. ???? ??? ?????.
    5. ???? ?????? ??? KB971026.adm ???? ??? ??????? ?? ?????? 1 ?? ???? ??? ???.
    6. ???? ??? ?????. ??? ????? ???? ??????? ???????? ????????? (ADM) ??? ????? ???????.
    7. ?? Windows Vista ?? Windows Server 2008 ????? ??????? ???????? ????????? (ADM) ? ???? ??? ????? ?????? FCS Microsoft.
    8. ?? ????? ??????? ???? ????? ??????? ????? ???? ??????.
    9. ??? ????? ? ?? ???? ??? ?????.

?????? 2: ??? ????? ?? ???? ????? ????? .reg

  1. ??????? ???? ???? ????? Forefront Client Security ??? ????? ??? ??? .reg. ????? ?? ?????????? ???? ? ??????? ????? ????? ????? ? ?? ???? Microsoft ?????? ??? ?????:
    http://technet.microsoft.com/en-us/library/bb418857.aspx
    (http://technet.microsoft.com/en-us/library/bb418857.aspx)
  2. ???? ?????? Windows ???? ???? ????? .reg.
  3. ???? ??? ?????? ?????? ??? ????? .reg ??? ?? ???? ??? ?????.
  4. ??????? ??? ????? ????? ??? ?? ????? ??????? ???????? ??? ????? ?????: 
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Scan]
"DisableScanningNetworkFiles"=dword:1
  5. ???? ????? ????? .reg.
  6. ??????? fcslocalpolicytool.exe ???????? ????? .reg ??? ???? ????????? ???????. ????? ?? ?????????? ???? ? ??????? ????? ????? ????? ? ?? ???? Microsoft ?????? ??? ?????:
    http://technet.microsoft.com/en-us/library/bb418857.aspx
    (http://technet.microsoft.com/en-us/library/bb418857.aspx)
???? ??? ?????? | ????? ???????

?????

???? Microsoft ?? ??? ????? ?? ?????? Microsoft ??????? ?? ??? "????? ???".
???? ??? ?????? | ????? ???????

???????

???? ???????: 971026 - ????? ??? ??????: 04/?????/1430 - ??????: 2.1
????? ???
  • Microsoft Forefront Client Security
????? ??????: 
kbmt kbexpertiseinter kbsurveynew kbqfe kbhotfixserver KB971026 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????971026
(http://support.microsoft.com/kb/971026/en-us/ )
???? ??? ?????? | ????? ???????

????? ???????

 
???? ??? ?????????? ??? ??????