Malwarebytes' Anti-Malware (MBAM) update question

[ssj100]

Am I correct in observing that every time MBAM updates, it re-downloads the entire database file (about 1.8Mb)?

Seems like a rather inefficient way of updating?

[CubonesCastle]

Its not the whole databace. Atleast i don't think so anyway.

[Someone]

-{ Quote: "Its not the whole databace. Atleast i don't think so anyway." }-
It does seem like it's the whole database, last time I checked.

[Keyboard_Commando]

-{ Quote: "Am I correct in observing that every time MBAM updates, it re-downloads the entire database file (about 1.8Mb)?

Seems like a rather inefficient way of updating?" }-

I have been wondering if this is so, too!

I sit there watching the download size just hoping one day it will be bigger/smaller than 1.8mb. /notsarcasm

Not sure about SAS, it no longer shows the size of the download each time. Maybe they list file sizes on their website.

Core Definitions 3885 05/08/2009 06:54PM PDT 3066KB
Trace Definitions 1833 05/08/2009 06:54PM PDT 162KB

^^ Thats SAS latest update

[Sputnik]

-{ Quote: "Its not the whole databace. Atleast i don't think so anyway." }-
In fact it actually is the entire database :P

[Retadpuss]

MBAM has a tiny database compared to full AMs, therefore it is only a small download.

[progress]

Incremental downloads because of 1.8 MB? :D

I think there is no reason ..

[progress]

-{ Quote: "That's only your opinion! I want my updates to finish in one second, not ten seconds haha!" }-

Don't get me wrong, but 5 minutes for scanning is no problem, am I right? ;D

[Fly]

-{ Quote: "It's rather unfortunate that they couldn't use incremental downloads (that is, download only the new definitions each time) like most Antivirus sofware. Much, much more efficient don't you think?

I'm pretty sure SAS uses the same updating process as MBAM, as they both take rather long to update (especially at peak internet traffic times in my country)." }-

My guess is that they concentrate on recent malware ('what the AVs don't catch'), and the definitions they send you are (mostly) for recent malware. So sending the completele definitions file, especially since it's brief, makes sense. They probably don't want to follow the method of keeping old signatures of malware that is no longer a significant threat. (possibly with exceptions).