?? ???????? Forefront ??????? ??????? anti-??????? ??????? ?? ??? ??? ?????? ?? ?? ???? ?? ??? ?????? ??

???????? ?? ?? ???? ?? ?? ???????? ?????

?????? 1

??????? ????????? evolved ??, ?? ??????? ???? ?????? ?? ??? ????? ?? ??? ?? ??????? ?? ???????? ???

???????????

Forefront ??????? ?? ??????? ???? ?? ??? ??? ?????????????? ?????????? ?? ??? ????? ?? ??? ?? ???????? ????? ???? ???? ?? ?? ?? ???????? ?? ????? ???? ?? ??? ?? ???????? ?? ???? ???? ?????? ??? ?? ???????? ?? Forefront ??????? ??????? ??????-??? ??????? ??? ???????? ????? ????

?????? 2

?? ???? ??????? anti-??????? ?????????? ???????? ?? ??? ?????????? Explorers ?? prematurely ???????? ?? ?? Windows 2000 ??? ?? ?? ???? ??????? ?? ???? Windows ????????? ??????? ??? ????? ???

???????????

?? ???????? ?? COM ?????????? Explorers ??? ??? ????? ???? ???? ?? ?? ????? ??? ??? ???????? ???? ???? ??? ???????? ???? Windows 2000 ??? ????? ?? ?? ???? ?????? ?? ????? ??? ???? ??? ?? ?????? ?? ???? prematurely ???? ?????? ?? ??? ?????????? Explorers ?? ??? ???? ???

?????? 3

?????? ?? ?????MpCmdRun.exe - ??? ?????????? ???? ?? ?? ?? ??? ?????? ?? ?? ??? ?????? ?? ??? traces, ??? ????? ????? ??????? ??? ????? ?? ????? ???? ???? ??? tracing mini-filter ??????-??? ??? ?? ??? ?????? ???

???????????

MpCmdRun.exe - ??? ???????? ???? ?? ??? ?????? ?? ????? ???? ?? ??? ???? ??? ??????-??? mini-filter ??? ?? ?????? ??? ???? ?? ??? ????? ????? ???: ??? ?? ???? ?? ??? ?????? ???

?????? 4

Forefront ??????? ??????? ????? ????????? ??? ?? ??????? ????? ??? ???????? ???? ??? ?? ?? ??????? ????? ?? ?? ??????? ???????? ?? ???? ????? ???? ??? ?? ?????? ??? ?? ??????? ????? ???????? ???? ??? ????? ???? ??? ??:

???????????

?? ?????? ?? ?? ?? Forefront ??????? ??????? (FCS) ????? ???? ?????? ?? ?????? ?? FCS ???? ?????? ?? ?????? ?? ??? FCS ???? ?? ????? ??????? (.lnk) ??????? ?? ????? ?????? ??? ????? ?? ?? ???? ?? ??? ??????? ????? ?? ?????? ?? ??? ???????? ???? ?? ?? ???? ???? ??????? ???????? ?? ?? ??, ??? ???? ?? ???????? ????? ????? ?????? ??? ?? ?? ???? ??????? ????? ??, ???? ?????? ?? ????? ???? ??????

?? 2009 ???? ??????? ?? ??? 1.1.4701.0, 1.59.3.0 ??????? ?????? ?? ?????? ???? ??? ?? ?? ?? ???? ??????? ?? ????? ?? ??? ?? ???????? ?? ?? ??? ???????? ??? ??, ??????? ?? ????? ?? ??? ?? ??? ??????? ????? ???? ??? ?? ?????? ?? ????? ???? ?? ??? ??? ????? ????? ???? ?????:

• ??????? ?????? ??????? 1.59.3.0 ?? ?????? ??????? ??????? ?????
• ?? ???? ??? ?????? anti-??????? ??????? ?????? ??????? ?????
• ???? ??????????? ????? ??? ?????? ???? ???? "???? ???????"?? ???? ??? ????

?????? 5

On a system drive that is a dynamic disk volume, the detected malware causes repeated detections and creates excess files.

???????????

This issue is corrected so that detections on a system drive that is a dynamic disk volume do not cause repeated detections or unnecessary files.

?? ??????? ????????? Microsoft ?? ?????? ??..

???:?? ???????? ?? Windows ????? ?????? ???? ?? ?? Microsoft ?????? ?? ?????? ??? If you want to obtain the file for deployment by using a different method, follow these steps:

1. ????? Microsoft ?????? ?????? ??? ???? ?? ????:
   HTTP://catalog.Update.Microsoft.com/v7/site/Home.aspx

   (http://catalog.update.microsoft.com/v7/site/Home.aspx)
2. ??????:971026????????????? ???, ?? ???? ??????.
3. ????? ????,add??????? ?? ??? ???????? ???????
4. ??? ????? ?? ???? ??? ???, ?? ??? ????? ????????? ???????????.
5. ????? ????,??????? ????.
6. ????? ????,???????, ?????? ?? ???????? ??????? ????, ?? ???? ??? ??????? ????????? ????OK.
7. ????? ????,???? ?????? ????-????? ????, ?? ???? ??????? ??????? ??Microsoft ?????????? ??????? ?????? ?? ??????? ???? ???? ?? ???? ???????? ??????? ?? ??? ??????? ???? ???
8. Wait until the hotfix is downloaded to the specified location, and then click??? ????.

?? ?????? ?? ??? ????? ??????

This hotfix may not be installed when you use Windows Update to install updates on a computer that is running a Server Core installation of Windows Server 2008.?? ?????? ?? ???? ??? ???? ??????? ?? ???, ????? ???? ?????? ?? ????? ?? ???? ?? Microsoft ???????? ??? ?????::

??????????????

???? ?? ??? ???? ?? ?? ???????? ?? ??????? ???? ?? ??? ????

???? ??????? ????????

You must restart the computer after you apply this hotfix.

????????? ???????????? ???????

?? ???????? ?? ????? ?????????? ????? ??:

????? ???????

The English version of this hotfix package uses a Microsoft Windows Installer package to install the hotfix package. ?? ??????? ?? ??? ?????? ?? ??? ????? ?????? ??? ??????? ????????? ??? (UTC) ??? ???????? ??.. ?? ?? ????? ??????? ????? ???, ?? ?????? ??????? ??? ??? ?????? ?? ???? ??.. "UTC ?? ??????? ??? ??? ???? ????? ?? ???, ???????? ??? ??? ""?????? ?? ??? ???"" ??? """"??? ???????"" "??? ???????? ???? ??? ?????? ?? ??? ???? ??? ???

Forefront Client Security, x86-based versions

Forefront ??????? ???????, x64-?????? ?????????

???????? ??? ??, ?? ??????? ???????? ??????? 4 ?? ?????? ?? ?????? ??? ?????? ????? ???? ??? ?? ?????? ?? ????? ???? ?? ??? ?? ??????? ???? ?????? ???? ?? ?????? ?? ?????? ?? ????? ???? ??? ?? ?? ?? ???? ???? ?? ?????? ??????? ???? ?? ??? ?? ?? ???? ??????? ??????? ?? ????? ?? ??? ??????? ?? ??? ???? ???? ???? ????? ?? ???? ?? ???? ?? ???? ??????? ???? ?? ?????? ?? ?????? ?????????? ?? ??? ???? ???? ???????????? ???????? (ADM) ????? ?? ????? ??? ???? ???????? Forefront ??????? ??????? ??????? ????? ?? ?????? ?? ???? deployable ???? ???? ???????, ?? ????? ?? ??? ???? ????? ?? ????????? ???? ?? ??? Fcslocalpolicytool.exe ???? ???? ???? ?? ??? ????? ???? ?? ?????

??????????? ????? ?? ????

???? ?? ?????????, ???? ?? ??? ????? ?? ???????? ??? ?? ???? ?? ?? ???? ????:

?????? 1: ?????? ???? ???? ADM ????? ?? ????? ????

1. ??? ???? ???? ???????????? ???????? ????? ??????
   1. Notepad ??????? ????..
   2. ?? ????????? ?????, ?? ???? ??? ????? ???? Notepad ??? ???????:

      CLASS MACHINE
      CATEGORY !!FCSCategory
      	POLICY !!NetworkScan_Name
      		KEYNAME "SOFTWARE\Policies\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Scan"
      		EXPLAIN !!NetworkScan_Explain
      
      		VALUENAME DisableScanningNetworkFiles
      		  VALUEON NUMERIC 1
      		  VALUEOFF NUMERIC 0
      	END POLICY
      END CATEGORY
      
      [strings]
      FCSCategory="Microsoft FCS Scan Configuration"
      NetworkScan_Name="Disable Network Scan"
      NetworkScan_Explain="This setting instructs the FCS antimalware client not to scan referenced network locations."
      

   3. ????? ???????????? ??,?? ??? ??? ??????.
   4. ???? ?????? ?? ??? ????, ?? ???? ??? ?????KB971026.adm?????????? ???????? ????
   5. ??????? ?????? ??????????? ???, ?? ???? ?????? ??????? (*. *).
2. ???? ???? ???? ?? ??? ???? ???? ???????????? ???????? ????? ?? ????? ????
   1. KB971026.adm ????? ?? ???????? ???? ?? ????????? ???? ?? ??? ?????? ????? ??? ?????For more information about how to manage ADM files, click the following article number to view the article in the Microsoft Knowledge Base:
      816662

      (http://support.microsoft.com/kb/816662/ )

      Recommendations for managing Group Policy administrative template (.adm) files
   2. Open the group policy editor to the appropriate local or Active Directory based location. Typically, this is done either through the local group policy editor, Active Directory Users and Computers, or the Group Policy Management Console(GPMC).
   3. ??????? ???????????? ???????????, ????-????? ???????????????? ????????????? ????,Add/Remove Template.
   4. ????? ????,add.
   5. Click to select the KB971026.adm file that you created in Step 1, and then click?????.
   6. ????? ????,??? ????. TheClassic Administrative Templates (ADM)folder is created under???????????? ????????.
   7. Windows Vista ?? Windows Server 2008 ??, ?? ??????? ????Classic ???????????? ???????? (ADM)????? ????,Microsoft FCS ????? ???????????.
   8. ???? ??? ??? ??? ????? ??????????? ????? ?? ????? ????.
   9. ??? ?????????? ?????? ????-????? ????, ?? ???? ???OK.

?????? 2: ?????? ????. reg ????? ?? ??????? ????

1. ???. reg ????? ?? ??? ???? ???? ???? ?? ??? Forefront ??????? ??????? ??????? ????? ?? ????? ????? ???? ??????? ?? ??? ? ????????? ????? ????????? ??? ? ????? Microsoft ??? ???? ?? ?????:
   HTTP://TechNet.Microsoft.com/en-us/library/bb418857.aspx

   (http://technet.microsoft.com/en-us/library/bb418857.aspx)
2. Windows Explorer ?????, ??. reg ????? ?? ?????? ??????
3. . Reg ????? ?? ????-????? ????, ?? ???? ??? ????? ??????????.
4. ????? ?? ??? ???? ?? ??? ??????? ????, ?? ???? ??? ????? ?? ????????? ????? ?? ??? ??? ??????:

   [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Scan]
   "DisableScanningNetworkFiles"=dword:1

5. ??????, ??. reg ????? ?? ??? ?????
6. ?????? ???????? ??. reg ????? ?? ???? ???? ?? ??? fcslocalpolicytool.exe ?? ????? ????? ???? ??????? ?? ??? ? ????????? ????? ????????? ??? ? ????? Microsoft ??? ???? ?? ?????:
   HTTP://TechNet.Microsoft.com/en-us/library/bb418857.aspx

   (http://technet.microsoft.com/en-us/library/bb418857.aspx)

Microsoft ?? ?????? ?? ?? ?? ?? ?? Microsoft ???????? ??? ?? ?????? ?? ?? "???? ???? ???? ???" ?????? ???????? ???..