Definition update recycling - Permanent Fix

[Cliff]

Robin,
Previous instructions by others included uninstalling the current version
and deleting all the folders, etc.
I have WinXP SP2 with all windows update as of today. I have MsAS Version:
1.0.509 w/ Defs: Version: 5733 (07/08/2005 16:41:12).
I think you are saying that all I have to do is delete the
C:WINDOWS\SYSTEM32\gcUnCompress.dll (Mine is currently Version 5.41, 128 KB
10Feb2005.) and go to the MsAs Site and follow the instructions to install
the new version and it will override my old version. Then follow your
instructions. Is that correct? If so that sounds easy enough. I just didn't
want to have to un-install the old version and delete the folders, etc. One
other question - I have one file currently in quarantine. Will it still be
there?
(Oh, I suppose to be safe it would be good to delete temporary internet
files, first, how about files in my ... Cliff/TEMP directory?) Do I need to
delete any icons, or can I just go to the icon in the Sys Tray and Right
Click and Select Shutdown MsAs? I've already checked out my system for MS
validation and I've not had any trouble with Windows or Office Updates for
the last couple of months.
Thanks for your help,
/s/ Cliff

 

[Robin Walker [MVP]]

I have MsAS Version: 1.0.509 w/ Defs: Version: 5733 (07/08/2005 16:41:12).
I think you are saying that all I have to do is delete the
C:WINDOWS\SYSTEM32\gcUnCompress.dll (Mine is currently Version 5.41,
128 KB 10Feb2005.) and go to the MsAs Site and follow the
instructions to install the new version and it will override my old
version.

That should be all that is needed.

Then follow your instructions. Is that correct?

The posted procedure in the first entry of this thread should not be
necessary if you deleted the gcUnCompress.dll file from the System32 folder
before installing the latest 614 build. You can check the file anyway after
the 614 installation to see if it looks the right version.

I just didn't want to have to un-install the old
version and delete the folders, etc.

Although I have read that some people resorted to those extremes, I have not
understood why they helped. In particular, I cannot see any causal
relationship between deleting the \Program Files\Microsoft AntiSpyware\
folder and what happens to a DLL file in the SYSTEM32 folder.

One other question - I have one
file currently in quarantine. Will it still be there?

Quarantined files will still be there ONLY if you DO NOT manually delete the
\Program Files\Microsoft AntiSpyware\ folder.

(Oh, I suppose to be safe it would be good to delete temporary
internet files, first, how about files in my ... Cliff/TEMP
directory?)

Clearing the Temporary Internet Files might be wise before the download of
the installer. The Temp folder should not be involved in these issues.

Do I need to delete any icons, or can I just go to the
icon in the Sys Tray and Right Click and Select Shutdown MsAs?

Just shutdown MSAS. The various shortcut icons on the desktop and Start
menu will get updated by the new installation anyway.

 

[Dallas Dees]

THANK YOU!!!

-----Original Message-----
After much debugging, I have found that the problem with definition update
failures and repetition is because of an incorrect version of the file
gcUnCompress.dll in C:\WINDOWS\SYSTEM32\ (for XP) or C:\WINNT\SYSTEM32\ (for
2000 or systems upgraded from 2000).

The incorrect version is of length 130,272 bytes.
The correct version is of length 95,448 bytes.

To update your system to install the correct version of the file, do the
following:

1. In the System Notification Area, right-click on the MSAS icon and select
"Shutdown Microsoft AntiSpyware".
2. In Explorer, navigate to C:\WINDOWS\SYSTEM32\, locate the file
"gcUnCompress.dll", right-click on it, and select "Delete".
3. In Control Panel "Add or Remove Programs", select "Microsoft AntiSpyware"
and click button "Change".
4. Click "Next".
5. Select "Update Microsoft AntiSpyware", click "Next".
6. Click "Install".
7. When the re-installation finishes, click "Finish".
8. In Explorer, in folder C:\WINDOWS\SYSTEM32\, check that
"gcUnCompress.dll" is now 95,448 bytes long, by right- clicking it and
selecting "Properties".
9. Launch MSAS, pull down the File menu and select "Check for updates" -
this time it really will update your definition files to the latest version.
10. In Explorer, open the folder C:\Program

Files\Microsoft AntiSpyware, and

satisfy yourself that the modification dates of the three definition files
have changed:
gcDeterminationData.gcd
gcThreatAuditThreatData.gcd
gcThreatAuditScanData.gcd

Done!

You won't ever have to manually install the definition files again, nor will
the update keep repeating every time you try.

--
Robin Walker [MVP Networking]
(e-mail address removed)


.

 

[Robin Walker [MVP]]

It's time to withdraw the recommended procedure in the first post of this
thread, and post a new recommended procedure:

1. In MSAS, pull down the "Help" menu and select "About...".
2. Read the Version number. If it is 1.0.615 or higher, stop now, there is
nothing to do.
3. If the Version number is less than 1.0.615, carry on.
4. Close MSAS.
5. If you use a browser other than MSIE, follow its procedures for emptying
its web cache, then skip to step 9.
6. In control panel "Internet Options", emtpy your Temporary Internet Files
by clicking on the button "Delete Files..."
7. In the dialog that comes up, check "Delete all offline content", and
click OK.
8. Pause: when the file deletion has finished, click OK in Internet Options.
9. Launch your web browser, go to http://www.microsoft.com/spyware/ then
follow the links for the download.
10. When downloading the AntiSpyware Installer, select Save rather than Run.
11. When the download finishes, in Windows Explorer navigate to the
downloaded file, right-click it, and select "Properties".
12. Click tab "Digital Signatures" and read the date and time of the Digital
Signature.
13. For the Build 615 Installer, the digital signature date should be 13
July 2005 at 18:44:35 GMT, though the time will be displayed as adjusted for
your timezone.
14. If any other Digital Signature date is shown, then you do not have the
Build 615 installer: maybe your download was thwarted by an intervening web
cache: if so, repeat from step 5 tomorrow, each day until it comes right.
15. If you have the Build 615 installer, then execute it now. You should
restart Windows after the installer has finished.

Done.