Re: svchost & Microsoft Updates

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

In regards to my theory about NOT scanning the SoftwareDistribution subfolders and *especially* DataStore.edb -

Virus scanning recommendations for computers that are running Windows Server 2003, Windows 2000, or Windows XP
http://support.microsoft.com/kb/822158

For computers that are running Windows Server 2003, Windows 2000, or Windows XP
>
Do not scan the following files and folders. These files are not at risk of infection. If you scan these files, serious performance problems may occur because of file locking.
>
Where a specific set of files is identified by name, exclude only those files instead of the whole folder. Sometimes, the whole folder must be excluded. Do not exclude any one of these based on the file name extension. For example, do not exclude all files that have a .dit extension. Microsoft has no control over other files that may use the same extensions as the following files.
• Microsoft Windows Update or Automatic Update related files
• The Windows Update or Automatic Update database file. This file is located in the following folder: %windir%\SoftwareDistribution\Datastore
>
Exclude the Datastore.edb file.
>
• The transaction log files. These files are located in the following folder:
%windir%\SoftwareDistribution\Datastore\Logs
Exclude the following files:
• Edb*.log

Note The wildcard character indicates that there may be several files.
• Res1.log
• Res2.log
• Edb.chk
• Tmp.edb


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


AlanB wrote:

How big should the DataStore.edb file be?
Is it sufficient to install the two recommended updates or should you also reconstitute the DataStore.edb file to play safe?

"MowGreen [MVP]" wrote:


Hans-Georg Michna wrote:


On Tue, 15 May 2007 16:13:42 +0100, Robin Walker [MVP] wrote:



Yes, but not all PCs running Microsoft Update. It is not yet understood why a few PCs exhibit this problem when the vast majority are working normally. I work in an organisation with very many PCs, and have yet to see a single example of this problem.

It is suspected that the problem is more severe when Office 2003 is installed. Other versions of Office do not seem to have produced as many reports of this problem.


Robin,

I believe it is slower, single-core processors that experience
the problem, because faster computers get through the process
before the timeout.

Hans-Georg

Not entirely so. There's an issue with the detection scan when it comes to the DataStore.edb, located in WINDOWS\SoftwareDistribution\DataStore
My theory is that there's been data corruption in said file. I've also seen said file grow to humongous proportions ... over 1 GB in some situations.
As to what's caused it ... perhaps scanning or monitoring of the system with an 'intrusive' AV [EX: Symantec 'products' aimed at Home Users] and/or update sessions that may have been unexpectedly ended.

I don't think this issue can be tied soley to older, slower processors.
In fact, an ex-MVP contacted me about his brand new Vista system experiencing this issue. It's far from 'under powered' and Office 2007 is installed.
We cleaned out the SoftwareDistribution subfolders and I suggested that it not be scanned. The issue has not come back, yet.
Now I wish that I'd suggested deleting the DataStore.edb instead <w>

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


.

Relevant Pages

  • Re: Cant change security policy
    ... 822158 Virus scanning recommendations on a Windows 2000 or on a Windows ... Antivirus Scanning of IIS Compression Directory May Result ... > I'll do the exclude for the exchange folder as well, ...
    (microsoft.public.windows.server.sbs)
  • Trend C/S/M Exclusion List - POP3?
    ... I know Trend C/S/M should not be scanning the exchsrvr directory. ... also exclude the "C:\Program Files\Microsoft Windows Small Business ...
    (microsoft.public.windows.server.sbs)
  • Re: Antivirus.
    ... Exclude it from scanning the Print Spooler folder. ... 321531 The Cluster Service May Experience a "MoveFileExW Failed" Error ... Windows NT/2000/2003 Cluster Technologies ...
    (microsoft.public.windows.server.clustering)
  • Cant Scan on Network
    ... I have two Dell computers networked to run off one Dell ... Dell support informs me the Windows XP does not allow for ... scanning on a network, because it doesn't know which of ...
    (microsoft.public.windowsxp.print_fax)
  • Cant Scan on Network
    ... I have two Dell computers networked to run off one Dell ... Dell support informs me that Windows XP does not allow ... for scanning on a network, ...
    (microsoft.public.windowsxp.general)