Updated Installed Components

When I right click on the NOD icon in the taskbar and choose 'About', I get the following list of Installed Components. Obviously some have been updated automatically recently by NOD.

Virus signature database: 3050 (20080423 )
Update module: 1023 (20080229 )
Antivirus and antispyware scanner module: 1109 (20080418 )
Advanced heuristics module: 1070 (20080212 )
Archive support module: 1077 (20080422 )
Cleaner module: 1027 (20080418 )

I imagine all of NOD can't be automatically updated from the WEB and new releases of NOD have drivers that must be installed manually?

But I'd still be interested to know where the files for these updated modules are located.

 

Obvisouly, virus sig database is updated automataclly if you have it setup to do that. As for some of the other ones, I have only known get them updated after I download the latest version. Maybe someone can can either confirm or deny this?

 

Not true, three of the modules were all updated automatically recently in April.

 

Look here...... post 86-87, be sure to have good settings
https://www.wilderssecurity.com/showthread.php?p=1162198#post1162198

 

I know about the setting to update components as well, and I do have it set.

My question relates to the Installed Components themselves. How do they get updated?

Are they separate files located somewhere?

Are they just code inside ekrn.exe?

Are they DLL's?

 

They are periodically updated via the update function of the program just like the "Virus signature database" but less frequently.

Bubba

 

i am sure to have read here that component update comes with virus database update

 

I know they come as part of signature updates, but where are these updated components located?

Are they files located somewhere? What are they called? Are they pieces of ekrn.exe?

I guess nobody knows.

 

As with most database files, they have a file extension of .dat. Those .dat files can be found in your Program Files\ESET\ESET NOD32 Antivirus folder. Each of those files represent a particular module component. You can open the files with notepad if you wish and at the top of the file is the info saying what module that file represents.

The latest Archive support module: 1077 (20080422)em003_32.dat

If you care to look further, you can open the upd.ver file located in your Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Updfiles folder and you should be able to then determine any further info concerning the files and their associated modules.

Bubba

 

Thanks Bubba, that explains the modules very well.

I wonder out of curiousity how they get executed?

Are these .dat files full program modules on their own? Are they patches that get applied?