New engine 6038 to be released

Hello,

today a new engine 6038 with improvements under the hood aimed at better generic detection is going to be released. The update will be staggered and initially available on pre-release update servers only.
Even though we don't expect any problems and the transition to the new engine should be seamless, please report us any unusual behavior immediately should you come across any.

regards,

Marcos

 

Engine 6038 updated under pre-release, will advise, thank you.

 

Many thanks for the heads-up Marcos.

I'll keep an eye on our 120+ machines. They will all be rebooting at some stage this morning anyway due to Patch Tuesday updates hitting WSUS - we always have "Patch Wednesday"


Jim

 

I am in the same boat that Jim is over here with the WSUS/Patch Wednesday and all.

Are we going to notice any performance improvements or is this strictly detection enhancements?

 

Detection enhancements. If you have performance problems when scanning certain files, we'll be glad to analyze them and make the necessary improvements.

 

Just to be sure, since this seems more than just a definitions update. How will this affect version 2.7? I understood that definition updates will still be available for 2.7 this year. Also, how much time till it becomes available?

 

I am not entirely sure, but I think version 2 uses different signatures. Version 3 and version 4 (and so will version 5) share definitions. So this will probably not affect version 2.7.
But why would you stick to version 2.7 anyway, extremely old pc?

 

By detection enhancements does this mean improved malware detection and removal?

 

About 7 or 8 years old. I don't think it would have a problem with version 3, I'm just way too much of a lazy bum to bother upgrading. I will do it eventually, but with 2.7 still upgrading till the end of this year, I don't really have an incentive.

Anyway, if I understood correctly, 3 and 4 share definitions, but they're still released at the same time?

 

I have around 10 machines, both Windows XP and Windows 7 machines which have acquired the update. No problems to report here. The majority of my machines are updating from the mirror server however and I see they are all still at 6037.

Update: mirror has now received and pushed 6038.

 

How can we confirm we received the updated engine?

Thanks.

 

If you have the signature db 6038 installed you got the new engine.

 

After I read this topic I did a manual update and it updated to 6038, about an hour later it automatically updated to 6039, and later again it updated again to 6039 :S

 

Here's where I am as of April 14:

Virus signature database: 6039 (20110413)
Update module: 1031 (20091029)
Antivirus and antispyware scanner module: 1296 (20110301)
Advanced heuristics module: 1117 (20110412)
Archive support module: 1128 (20110315)
Cleaner module: 1050 (20101207)
Anti-Stealth support module: 1024 (20101227)
SysInspector module: 1217 (20100907)
Self-defense support module : 1018 (20100812)
Real-time file system protection module: 1004 (20100727)

It looks as if the module that was updated was the Advanced heuristics module.

 

Yeah, I have the same, except I have update module 1033, but that is perhaps because I'm using ESS.

 

I too am noticing that any client that isn't on the Pre-release server does not have the newest update module that is available.

 

I think the Update module 1033 is still only available on the prerelease server. So that is no problem.

These my are modules, in a Dutch 64-bit version of ESET Smart Security 4, prerelease updates enabled. I added English translations for the modules which might be some harder to understand in Dutch, all the others are clear.

Database viruskenmerken: 6040 (20110414)
Updatemodule: 1033 (20110222)
Module voor antivirus- en antispywarescanner: 1296 (20110301)
Advanced heuristics module - Module voor geavanceerde heuristiek: 1117 (20110412)
Archive module - Module voor archiveringsondersteuning: 1128 (20110315)
Cleaner module - Opschoonmodule: 1050 (20101207)
Anti-Stealthmodule: 1024 (20101227)
Module voor Persoonlijke firewall: 1064 (20110215)
Antispammodule: 1016 (2010120
SysInspectormodule: 1217 (20100907)
Selfdefense - Zelfverdedigingsmodule: 1018 (20100812)
Real-time beveiligingsmodule bestandsysteem: 1004 (20100727)

 

Yes, I do not have pre-release enabled. I used to have it enabled but changed that.

 

first reboot after update:
Service ESET Service hung on starting.
Faulting Application Path: "C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"

Problem signature
Problem Event Name: ServiceHang
Service Name: ekrn
Image Name: ekrn.exe"
Image Version: 0.0.0.0
Service Type: 10
Start Type: 2
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 2057

Extra information about the problem
Bucket ID: 64116229

 

Thanks Marcos.

In addition, last night I added Pre Release servers on my home client. Not sure why I missed this!

Cheers!