Actually it is quite true. Especially in the case of McAfee software. It is a symbiotic
relationship of the ENGINE and DAT files that leads to the ability to detect and clean any
given infector. If you don't update the ENGINE (for example the latest McAfee ENGINE is
4400) then at some point the McAfee DAT files won't work properly or to their fullest
capability. That is why McAfee has an End of Life (EoL) for ENGINE files.
The following is McAfee's own text on this subject.
Dave
~ ~ ~
McAfee Security Engine End-Of-Life (EOL) Program
IS YOUR ENGINE UP-TO-DATE? - Anti-virus is only as good as its last update!
Current Engine Information by platform:
- Microsoft: 4400
- Netware: 4320
- UNIX: 4400
- Macintosh OS X: 4240
Engine Security Tips from AVERT and the McAfee Security Engine Development Team
- Updating your DAT regularly files is essential and a MUST!
- Updating your scan engine is just as important and a MUST
- An old Engine WON'T catch some of today's threats
- Sometimes architectural changes to the way DAT files and scan
engine work together make it critical for you to update your scan engine
- AVERT says it makes sense to have as part of your Security Policy
- Program an Engine Update process to take advantage of the latest
technology and stay protected!
The Problem
Between 250 and 400 new detections are added to the DATs monthly by AVERT.
If you're not up-to-date, you are vulnerable to any one of them that gets a
foothold in the field (a.k.a. 'in the wild'). McAfee AVERT releases
regular DAT files, ensuring that full protection is added to all McAfee
products.
The DAT files contain the information required to detect and remove threats
- what to look for and where to look for it. However, today's threats are
evolving almost on a daily basis. Software providers continue to have
operating systems and applications changes that can change the way a
program acts or works and a virus-scanning program may not understand the
changes.
The Solution
Taking this into account McAfee Security regularly updates its scan engine
used by ALL McAfee Security virus detection and removal products. The
engine understands all the different structures in which a virus could lurk
- EXE files, MS Office files, Linux files, etc. Occasionally these changes
require us to make significant architectural changes to the engine as well
as the DAT files. AVERT strongly recommends users of ALL McAfee Security
virus scanning products update the scan engines in the products they have
deployed as part of a sound Security best practices program.
Here's how to check your engine version. Right-click on the McAfee shield
in the system tray, select 'About' and look at the 'Scan engine' version
number. If you need to update, you should update your scan engine
immediately.
McAfee Security Engine End-Of-Life (EOL) Program
Because of the evolving malicious code threat, users should update their
engines as soon as possible upon the release of McAfee Security's latest
scanning technology. When a new engine is released the existing engine
will begin its countdown to its EOL, and will therefore no longer be
supported by McAfee Security. Information on the McAfee Security Engine
End of Life policy and a full list of supported scan engines and products
can be found at:
http://www.mcafeesecurity.com/us/products/mcafee/end_of_life.htm
Best Regards,
McAfee AVERT - Anti Virus and Vulnerability Research, Analysis, and
Solutions visit us at
www.avertlabs.com
~ ~ ~
| > this is false... virus scanning engines have their technology updated
| > all the time and newer virus definition files are made with those
| > updates in mind such that they won't work (ie. fail silently) with
| > older engines...
|
| Baloney. Your theory smacks of FUD. "Oh, they will force your to buy the
| newest version because the purposely write the updates to break in the older
| version." Do you honestly think that an AV company would want that kind of
| publicity? If you do, please provide proof if you want us to believe you.
|
| My three year old anti-virus program uses exactly the same anti-virus update
| files as the newest version. Both detect the same viruses.
|
| Brian
|
|