Virus Signature Roll Back?

Discussion in 'ESET NOD32 Antivirus' started by ivan83, Nov 15, 2010.

Thread Status:
Not open for further replies.
  1. ivan83

    ivan83 Registered Member

    Joined:
    Nov 2, 2010
    Posts:
    5
    Hi,

    I like to ask whether it is possible to roll back a virus signature to a previous version e.g. 5622 back to 5621?
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    No. Do you experience some problems with the latest signature database?
     
  3. ivan83

    ivan83 Registered Member

    Joined:
    Nov 2, 2010
    Posts:
    5
    Hi Marcos,

    I was just wondering about the possibility of rolling back to a previous version if I encounter any issues for the current signature.
    Thanks for your prompt reply.
     
  4. Rmuffler

    Rmuffler Former Eset Moderator

    Joined:
    Jun 26, 2008
    Posts:
    995
    Location:
    San Diego, CA USA
    Hello ivan83,

    If you have previous update files saved at your mirror you can possibly clear the update files in the client and then apply an old update file from your mirror. This would only work until the client checks in for the latest update.

    Why would this be necessary, is there an issue with a current update?

    Thank you,
    Richard
     
  5. 3GUSER

    3GUSER Registered Member

    Joined:
    Jan 10, 2010
    Posts:
    812
    You can manually create a batch file and make it run automatically . This batch file should simply copy the content of some folders that belong to ESET such as X:\Program files\ESET\ and X:\Documents and Settings\All Users\Applications Data\ESET\~ESET product name~\Updfiles
    Then , in case you have problem , just enter in Safe Mode and then restore the content from the back up folders to the original folders
     
  6. dmaasland

    dmaasland Registered Member

    Joined:
    Nov 10, 2010
    Posts:
    468
    That won't roll back the update, that will just break your cache :)
     
  7. ivan83

    ivan83 Registered Member

    Joined:
    Nov 2, 2010
    Posts:
    5
    Hi Richard,

    I was just wondering about the ways to mitigate the impact of a bad virus signature release. Regarding your suggestion on using an old update file from the mirror, how do I check for previous updates files stored as well as the version number?

    ----------------------------------------------------------------------

    Hi 3GUSER,

    Am I right to say that your proposed solution requires the backup of the eset folders whereby the current signature has not been applied? If this is possible, then could I assume that I can copy the required eset folders with the current signature to an infected PC whereby it cannot access internal network/internet to update its outdated signature?
     
  8. tanstaafl

    tanstaafl Registered Member

    Joined:
    Apr 8, 2005
    Posts:
    207
    You're not serious? After the last fiasco when a simple signature updated crashed thousands of systems and entire networks, you're asking this questiono_O
     
  9. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    It wouldn't help in this case at all as the problem was introduced after an update to a newer version. Reverting back would mean installing the problematic version. When the problem occurred, ESET acted immediately and provided a solution in a quite short time after the issue was first discovered and reported. Afterwards measures were taken to prevent such issues from occurring in the future and further improvements, such as a sort of a manual revert, will surely be considered for future versions.
     
  10. mlaven

    mlaven Registered Member

    Joined:
    Nov 22, 2010
    Posts:
    1
    I was very glad to help you with this problem!
    (I was the first who reported this issue at ESET.)

    Also many thanks to "dmaasland" for his support!!


    Marcel Laven
    Stepco BV
     
Thread Status:
Not open for further replies.