Update definitions without internet connectivity

[someone]

Is there a way to update the spyware definition for an infected system
without connecting to the internet and using Auto or Manual updating within
MS AntiSpyware? Has anyone identified the files that are modified/replaced
when using Auto or Manual updating?

Our office was infected with a trojan which causes our systems to freeze
when connected to the LAN and automatically opens IE to http://j0r.biz. We
have found a way to clean the infection using Trojan Guarder while
disconnected from the LAN. We then scan with MS AntiSpyware WITHOUT the most
current definitions and then update to XP SP2. We would like to use a
current definition during the initial scan without having to rescan with the
updated definition when reconnected to the LAN.

Thank you.

 

[Bill Sanderson]

The downloadable binary is updated each time the definitions are updated.
The version number of the definitions included is mentioned in a paragraph
on the download page, so you can see whether you are downloading a version
newer than you have in place.

 

[someone]

What is the FTP or url for the binary file?

The downloadable binary is updated each time the definitions are updated.
The version number of the definitions included is mentioned in a paragraph
on the download page, so you can see whether you are downloading a version
newer than you have in place.

 

[someone]

Bill, thank you for the info. I now understand that the MS AntiSpyware
installer is updated with the latest definition as it is released.

As Bill stated look for the following paragraph:
Note: This download has been updated to include signature version 5685,
which is the most current as of January 27, 2005. Customers who have
installed Microsoft Windows AntiSpyware prior to this date do not need to
re-download. They will receive signature updates as part of their next
automatic or manual signature update.

http://www.microsoft.com/downloads/...A2-6A57-4C57-A8BD-DBF62EDA9671&displaylang=en

 

[Bill Sanderson]

That's it. Microsoft, as it happens, has just announced that their FTP
server is being retired as of May 1st, I believe. You've found the correct
URL.

 

[Guest]

I just checked to see if an updated version existed.

Although the site states...

Note: This download has been updated to include signature
version 5685, which is the most current as of January 27,
2005. Customers who have installed Microsoft Windows
AntiSpyware prior to this date do not need to re-download.
They will receive signature updates as part of their next
automatic or manual signature update.

....the signature is actually 5680 with the update date of
Jan 13, 2005 when you install it.

When will it be updated to the current version 5687 and
how often will it be updated?

 

[Bill Sanderson]

How did you verify that the version in the install is 5680?

Here's a KB article giving a clear way to tell which version is installed,
although I don't know how far they've updated it:

Information about update files and how to determine whether you are on the
latest (technical)
http://support.microsoft.com/default.aspx?scid=kb;en-us;892519

 

[someone]

Yesterday I downloaded and installed MS AS and noticed that the actual
definition is 5680, contrary to what the site says. When will the current
version 5689 be available? Ideally it should be updated when a new
definition is released.

 

[someone]

I launched MS AS and positioned my pointer over Spyware Definitions on the
System Summary page and it showed 5680 yesterday. That was the first time MS
AS was installed on this computer. Today I uninstalled it and manually
deleted the program folder and downloaded, installed and launched MS AS and
it was 5685. I don't understand what happened but no problems now, except
waiting for current definitions.

 

[someone]

Ignore this. It's a duplication. My bad...

Yesterday I downloaded and installed MS AS and noticed that the actual
definition is 5680, contrary to what the site says. When will the current
version 5689 be available? Ideally it should be updated when a new
definition is released.

 

[Bill Sanderson]

There's an appearance bug about the version number.

The current, at this writing, newest version available is 5689.

Regardless of the version number displayed after an autoupdate, do this to
confirm the current version:

Go to File, Check for Updates, and observe what happens--you will probably
get two stars, but not see an actual update take place. Once that's done,
go to Help, About, and check the definition version number stated there. It
should be correct, and it also ought to be 5689 at this writing.