PDA

View Full Version : About Spybot S&D defs update [11 Nov 2009]


FanJ
November 11th, 2009, 10:36 AM
See also update thread:
http://www.wilderssecurity.com/showthread.php?t=257955

Screenshot:
http://www.wilderssecurity.com/attachment.php?attachmentid=213648&stc=1&d=1257952871

As you can see in the screenshot, there was also this update:
Advanced detection library 1.6.5

This means that this file was updated:
c:\program files\spybot - search & destroy\advcheck.dll

PS:
for those interested, here is the info from my file-integrity-checker NISFileCheck:

Application: c:\program files\spybot - search & destroy\advcheck.dll
Status: Changed
Version old: 1, 6, 4, 18
Version new: 1, 6, 5, 20
Size old: 1570648
Size new: 1168216
Date old: 2009-09-07 13:18:34
Date new: 2009-11-04 10:14:08
RMD160 Hash old: E9405871DE480987C86798235C8CD11165F0AD74
RMD160 Hash new: 4240A723131F3FD9B959FA9A3BA91B9538BB9FAC

lordpake
November 11th, 2009, 12:33 PM
So, in plain terms, what does all that mean? :)

Improved detections for some specific threats?

FanJ
November 11th, 2009, 03:43 PM
-{ Quote: "So, in plain terms, what does all that mean? :)

Improved detections for some specific threats?" }-

Hi lordpake,

In plain terms, yes, that's more or less what it means :)
(which specific threats, I don't know).

The reason why I mentioned it:
Usually the file advcheck.dll is only updated once every x months (when the Spybot company thinks it is needed).
You know that that will happen when you see that info "Advanced detection library, !Advanced detection routines update" (as shown in the screenshot).
While Spybot installs such an update for advcheck.dll, quickly a small black DOS-window jumps up and Spybot does its update-job for that file.
I know that there were people in the past who had problems with it because they didn't allow some HIPS program on their system to let this update happen. So my posting was mentioned as a "wake-up" call: be warned that this will happen.

I hope that this makes it a little bit more clear.