Q for Virus Guy re NAV 2002

[Jim Heckman]

Hi,

I recently managed to hose my ancient Gateway Solo laptop running
Win98, and had to re-install NAV 2002 from CD. I followed your
procedure, and everything went fine except that I was surprised
when Live Update seemed to download only the latest virus
definitions, but no program updates. I know I'd gotten some over
the years, and was expecting to get at least one cumulative one.

Does this mean you can't get the latest and greatest engine anymore
starting from a NAV 2002 CD?

 

[Virus Guy]

I followed your procedure, and everything went fine except
that I was surprised when Live Update seemed to download
only the latest virus definitions, but no program updates.

I remember in the past (2003, 2004 or 2005) that there was about 10 or
12 mb of downloads spread across several different catagories the
first time the LiveUpdate was done after a re-install. But when a
re-install is done more recently (say, within the past 1 or 2 years),
I think there is only the virus def's and some other update (about 1
mb in size).

Does this mean you can't get the latest and greatest engine
anymore starting from a NAV 2002 CD?

It's my impression that the scan engine is wrapped inside the virus
definitions. I've checked the versions of the DLL's that are
associated with the scan engine and they are always very recent.

I have some old hard drives that would still have the older installs
of NSW 2002 (last updated in 2004 or 2005) and if I'm motivated enough
I'll check and see if there are any differences in any of the files
between then and now.

 

[Dustin Cook]

I remember in the past (2003, 2004 or 2005) that there was about 10 or
12 mb of downloads spread across several different catagories the
first time the LiveUpdate was done after a re-install. But when a
re-install is done more recently (say, within the past 1 or 2 years),
I think there is only the virus def's and some other update (about 1
mb in size).


It's my impression that the scan engine is wrapped inside the virus
definitions. I've checked the versions of the DLL's that are
associated with the scan engine and they are always very recent.

Hmm, not from what I've seen it isn't. I really don't think NAV2002 is
updating it's engine to the level it would need in order to offer you the
same security as say, nav2007. That's assuming the engine itself (which
is usually in the exe/dll files) was designed in 2002 with 2007
enhancements already in mind.

I could be wrong, of course...


--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: (e-mail address removed)
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

 

[Virus Guy]

Hmm, not from what I've seen it isn't. I really don't think
NAV2002 is updating it's engine ...

I posted this 2 years ago in this NG:

------------------

(this was copied from a symantec web page that no longer exists):

What is AV Engine Update 2004.2 ?

Version 2004.2 of the AV Engine is an update to the scanning and
repair component within the virus definitions. It is scheduled for
release in the virus definitions the week of August 2, 2004. All
products that update to these definitions (or later) will receive this
engine update.

[note the phrase "within the virus definitions" and "in the virus
definitions"]

This engine update improves detection of packed and “re-packed” 32-bit
Windows viruses (For example, executable files that have been
compressed or encoded with binary packers, which unpack themselves in
memory when they are run.)

All Symantec products that use virus definitions will receive this
update. The new engine will be released in the Intelligent Updaters,
..vdb, and .xdb packages on August 2, 2004, and released in LiveUpdate
definitions on August 4, 2004.

-------------------

You might also want to read a thread with this subject:

Re: Reinstalling Norton

In July 2005, in alt.comp.virus.

In August 2005, there was a thread in this NG with this subject:

Re: McAfee or Norton on New Notebook?

http://groups.google.com/group/alt....231a988c701?lnk=st&q=&rnum=1#26930231a988c701

Pay particular attention to the posts made by myself and Kurt Wismer
on August 7. That is where I post a log output of process explorer
showing that NAV 2002 was using scan engine DLL's that were up-to-date
as of that date. Specifically, posts 11, 12, and 13.

I stand by my assertion that scan-engine updates accompany
(transparently) virus defn files from symantec when necessary.

 

[Dustin Cook]

[snip]

I stand corrected then. Thanks for the information.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: (e-mail address removed)
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml