Virus signature database used during scan

Discussion in 'ESET NOD32 Antivirus' started by PaulB2005, Jan 27, 2010.

Thread Status:
Not open for further replies.
  1. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    Just watched a scan ending. It was at about the 99% mark and before it finished a new update arrived (4809). When the scan finished the NOD32 updated the Scan Page to show the database used during the scan was 4809 but when it started and for 99% of the scan it used the 4808 database. If it used 4809 then it did so only for the last 1% (probably less than).

    Would it not be more accurate for the NOD32 to show 4808 was used?

    Would it not be an idea for the program to suppress updated during scans or to check automatically for an update prior to scan starting?
     
  2. Nerimash

    Nerimash Registered Member

    Joined:
    Apr 14, 2009
    Posts:
    86
    Location:
    Ukraine
    I'm not sure but I think that Nod hold with the current AV-base at start of scan task and not changing it before scan finishes.
     
  3. stackz

    stackz Registered Member

    Joined:
    Dec 27, 2007
    Posts:
    619
    Location:
    Sydney Australia
    My observation is that whatever definitions are used at the start of the scan are the ones used for the scans entirety. Plenty of times I've updated definitions during a scan, but the scan always completes with the same definitions it started with.
     
  4. c2d

    c2d Registered Member

    Joined:
    Sep 26, 2007
    Posts:
    570
    Location:
    Bosnia
    That would be logical to me
     
  5. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    This would be a correct assumption that the AV uses the current loaded update signature while running the on-demand scan regardless if another
    arrived while the scan was in progress.
     
  6. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    OK. And that would be my assumption too. But the software reports the wrong database. It reports the current one when the scan ENDS not the one that was current when it started.
     
  7. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
  8. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    I'm sorry but i don't get your point....
     
  9. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Meaning, if your virus signature database signature files are currently to-date, I would not be concerned with the small issue.
     
  10. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    I see.

    True but it wouldn't be accurate. It would be good to be able to see that maybe your last scan wasn't with the latest database... Esp if an important detection was added in the latest database.

    Not important though, as you say...
     
  11. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    If you look in your last on-demand scan logs, you should be able to see the signature update version used during that scan as shown from mine below:
    I hope this helps.
     
  12. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    Thanks. That shows the correct info.
     
  13. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    You are welcome, glad to help.
     
Thread Status:
Not open for further replies.