em023_32.dat

[FanJ]

What is happening with the file em023_32.dat ?

NOD32 version 4.2.71.2 English on XP-home SP3 Dutch; no pre-release updates enabled.

I only update manually.

Lately when I update NOD32, I am seeing two updates coming. Usually you would think that besides of a defs update there is a module update. But looking at the NOD32 system info I don't see it. What I do see is that the file em023_32.dat has been changed. Somehow I have the feeling that it is related to the recent update of the Update Module itself on 13 March 2012, but I am not sure of that. So the question is: why and what is happening?

Below you will find two info's, from 19 March (defs 6980 (20120319)) and 20 March (defs 6981 (20120320)).

The info's give info made by Karen's DirectoryPrinter (Rest In Peace dear Karen, we all love you) combined with the NOD32 sys info.
The info from Karen's DirectoryPrinter is filtered by .dat extension and is sorted by:
- filename
- date
- size
- MD5 Hash

===

6980 (20120319)

em000_32.dat 14-3-2012 14:34 55.770 0F5F4A225AC0C248DC4B08B3791115ED
em001_32.dat 14-3-2012 14:34 501.177 9D5EF2AA2AD368E68BC3BB8E8795522C
em002_32.dat 19-3-2012 19:01 36.852.706 0C22039768308A3D01FFB264C969CAA3
em003_32.dat 12-3-2012 11:15 600.289 A71DD7FD6004E6BD9BFB058C884A6131
em004_32.dat 5-1-2012 01:00 492.053 2AAC5E476D76985616922F5D2B317CCD
em005_32.dat 23-1-2012 12:05 45.843 6B18D25FCB71146C3494878C9C98ED24
em006_32.dat 5-1-2012 01:00 82.606 35BB10A8B5AB8BFE0669BDCDDA5FAE00
em009_32.dat 5-3-2012 11:52 1.103.489 867961C8006E9179DFC6668C4B32023C
em013_32.dat 5-1-2012 00:49 38.604 CCBF0749CDAFE319737468F70A8782CF
em015_32.dat 5-1-2012 01:00 6.369 962D8FE8A16E3034B2C5D1B6BB5EEFE7
em023_32.dat 19-3-2012 19:01 2.026.897 7214F51F38757D050DA7B18DE40B1A19


Virus signature database: 6980 (20120319)
Update module: 1040 (20120313)
Antivirus and antispyware scanner module: 1343 (20120307)
Advanced heuristics module: 1121 (20111208)
Archive support module: 1142 (20120229)
Cleaner module: 1053 (20120120)
Anti-Stealth support module: 1026 (20110628)
ESET SysInspector module: 1224 (20120223)
Self-defense support module: 1018 (20100812)
Real-time file system protection module: 1006 (20110921)

===

6981 (20120320)

em000_32.dat 14-3-2012 14:34 55.770 0F5F4A225AC0C248DC4B08B3791115ED
em001_32.dat 14-3-2012 14:34 501.177 9D5EF2AA2AD368E68BC3BB8E8795522C
em002_32.dat 20-3-2012 01:49 36.853.088 1AA70CF82FBAC1039EC5438FCBC3D4AA
em003_32.dat 12-3-2012 11:15 600.289 A71DD7FD6004E6BD9BFB058C884A6131
em004_32.dat 5-1-2012 01:00 492.053 2AAC5E476D76985616922F5D2B317CCD
em005_32.dat 23-1-2012 12:05 45.843 6B18D25FCB71146C3494878C9C98ED24
em006_32.dat 5-1-2012 01:00 82.606 35BB10A8B5AB8BFE0669BDCDDA5FAE00
em009_32.dat 5-3-2012 11:52 1.103.489 867961C8006E9179DFC6668C4B32023C
em013_32.dat 5-1-2012 00:49 38.604 CCBF0749CDAFE319737468F70A8782CF
em015_32.dat 5-1-2012 01:00 6.369 962D8FE8A16E3034B2C5D1B6BB5EEFE7
em023_32.dat 20-3-2012 01:49 2.026.962 CB7EF2DE4A485E7697847F48A1FD25C3

Virus signature database: 6981 (20120320)
Update module: 1040 (20120313)
Antivirus and antispyware scanner module: 1343 (20120307)
Advanced heuristics module: 1121 (20111208)
Archive support module: 1142 (20120229)
Cleaner module: 1053 (20120120)
Anti-Stealth support module: 1026 (20110628)
ESET SysInspector module: 1224 (20120223)
Self-defense support module: 1018 (20100812)
Real-time file system protection module: 1006 (20110921)

[toxinon12345]

This is the new codenamed "PEGASUS" module, which is not visible in the About box, but visible during download of VSD.

I dont know what is the function of this new module and why is not registered in the About box.

[FanJ]

Originally Posted by toxinon12345

This is the new codenamed "PEGASUS" module, which is not visible in the About box, but visible during download of VSD.

I dont know what is the function of this new module and why is not registered in the About box.

Wow, that's an answer to an old post . Thanks toxinon12345 !
Finally there is the mysterious "PEGASUS" module name.

BTW, if I may ask, what do you mean with "visible during download of VSD"? What is VSD?

[toxinon12345]

When you perform a Virus Signature Database update manually you see under the progress bar a filename like "em_023_32_l1.nup"

[FanJ]

Originally Posted by toxinon12345

When you perform a Virus Signature Database update manually you see under the progress bar a filename like "em_023_32_l1.nup"

OK, I understand now what you were meaning with VSD: Virus Signature Database update.

Yes, I update only manually; I want to see what is happening.

However, you haven't explained why you were saying that em023_32.dat is called "PEGASUS".

[toxinon12345]

Originally Posted by FanJ

OK, I understand now what you were meaning with VSD: Virus Signature Database update.

Yes, I update only manually; I want to see what is happening.

However, you haven't explained why you were saying that em023_32.dat is called "PEGASUS".

open that file in wordpad

[Marcos]

You've already asked about this before, it's an auxiliary update module.

[toxinon12345]

New module added: em024_32.dat
codenamed "IRIS"