Tim said:
I have no idea what your thinking is...
(in all likelihood, I'm showing my ignorance!)
..however; the answers to your query are; approx 170Kb and I don't
know if Resident Shield will pick up the test virus I placed in that
dir....
==
Cheers, Tim Meddick, Peckham, London.
We've been trying to document to MS an issue where XP systems that have
512MB RAM or less become completely bogged down or non-responsive when
opted in to Microsoft Update. Since you stated your system is not opted
in to MU, but updates from Windows Update, I was hoping that, with your
cooperation, we could document that the issue is affecting systems that
are NOT updating from MU.
The size of DataStore.edb on your system shows that you've either
deleted it recently or "reset the updating components", which also
deletes the database file.
The other question I asked involves the monitoring or scanning of the
location of DataStore.edb by the installed AV -
WINDOWS\SoftwareDistribution\DataStore <--- this subfolder
There's a known issue when the AV is monitoring or scanning files that
are locked that causes corruption which is described in this KB -
http://support.microsoft.com/kb/822158
" Note If these files are not excluded, antivirus software may prevent
proper access to these files, and security databases can become
corrupted. Scanning these files can prevent the files from being used or
may prevent a security policy from being applied to the files. These
files should not be scanned because antivirus software may not correctly
treat them as proprietary database files. "
I've found that excluding just DataStore.edb from an AV's scan and *not*
monitoring with a 'RealTime Shield' puts *much* less strain on an XP
system that updates from WU.
Technically speaking, it does lower a system's overall Security but,
I've never seen nor heard of any system becoming compromised by
excluding DataStore.edb from monitoring and scanning.
MowGreen
================
*-343-* FDNY
Never Forgotten
================
"Security updates should *never* have *non-security content* prechecked