Definition Files

  • Thread starter Thread starter ScottP
  • Start date Start date
S

ScottP

My definition file says it's 5687; is there somewhere to
see what the latest release is? The "Check for updates..."
says it's the latest, but I thought it was up into the
57xx's.

sp
 
By Plun:
- Right click om MSAS icon in systray and choose shutdown
- Open Windows Explorer and go to Program files / MSAS
- Rename gcThreatAuditScanData.gcd to gcThreatAuditScanData.old
- Rename gcThreatAuditThreatData.gcd to gcThreatAuditThreatData.old
- Start MSAS and try menu file- check for updates.

Also it is not necessary to "Check for updates", MSAS checks this during
restart.
Verified and working.

Also check:
http://support.microsoft.com/default.aspx?scid=kb;en-us;892519
 
don't worry on the final version expect message center to
tell you if MSAS definition is up to date or expect
Microsoft to add a antispyware monitoring to SP2 security
center.
 
Thanks for your help. [2nd attempt at posting a reply :^]

We found that our Internet Filter was blocking access
to "spynet.com" because it was classified as a
spyware/malware site. We found this out by using a packet
sniffer and finding that site was being blocked.

After allowing that site, the updates started flowing
again. It's a little disconcerting that MSAS told me I was
up-to-date, rather than saying it couldn't connect!

We were able to get updates until just recently, so the
method of connecting must have changed in the past couple
weeks.

Thanks again!
Scott
 
Thanks for your help - I knew there were later definitions
than the one I had.

I did find the problem, which is posted on one of the
previous replies.

Thanks-
Scott
 
ScottP wrote :
We found that our Internet Filter was blocking access
to "spynet.com" because it was classified as a
spyware/malware site. We found this out by using a packet
sniffer and finding that site was being blocked.

Hi

This can be important, what Internet filter are you using ? This
must be corporate PC,s behind a firewall ?

A lot of users have problem with this and if Spynet.com is classified
as spyware/malware with some filter/firewalls this must be solved.
 
I'm not sure what's changed here--the defs have always been at spynet.com as
far as I'm aware.

The lack of any clear message that you are out of date is disconcerting--we
need to look closely at this with the next beta drop--I suspect that the
current condition of things is a product of many factors, and probably not
the intended final design.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

ScottP said:
Thanks for your help. [2nd attempt at posting a reply :^]

We found that our Internet Filter was blocking access
to "spynet.com" because it was classified as a
spyware/malware site. We found this out by using a packet
sniffer and finding that site was being blocked.

After allowing that site, the updates started flowing
again. It's a little disconcerting that MSAS told me I was
up-to-date, rather than saying it couldn't connect!

We were able to get updates until just recently, so the
method of connecting must have changed in the past couple
weeks.

Thanks again!
Scott
-----Original Message-----
By Plun:
- Right click om MSAS icon in systray and choose shutdown
- Open Windows Explorer and go to Program files / MSAS
- Rename gcThreatAuditScanData.gcd to gcThreatAuditScanData.old
- Rename gcThreatAuditThreatData.gcd to gcThreatAuditThreatData.old
- Start MSAS and try menu file- check for updates.

Also it is not necessary to "Check for updates", MSAS checks this during
restart.
Verified and working.

Also check:
http://support.microsoft.com/default.aspx?scid=kb;en- us;892519
--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm




.
 
Bill Sanderson has brought this to us :
I'm not sure what's changed here--the defs have always been at spynet.com as
far as I'm aware.

The lack of any clear message that you are out of date is disconcerting--we
need to look closely at this with the next beta drop--I suspect that the
current condition of things is a product of many factors, and probably not
the intended final design.

Hmmm ? Found this with a fast Google search, do we have more of these ?

127.0.0.1 spynet.com

http://www-ss.com/tutorials/hosts.htm


Maybe to check hosts file also for users with problem with this ?
 
Back
Top