I’m curious about the update scheme of SAS.
Since the latest 2 attempts to update the SAS definitions failed, I decided to uninstall and reinstall SAS yesterday morning. The SAS Setup file that I used was one that I’ve had since 01-26-2014. Since then, I have of course updated the definitions various times with plenty of additional definitions items added in that time span.
NOW … why, how is it that after reinstalling that 01-26-2014 version of SAS yesterday morning, the only definitions that were added were the ones in the image in the attachment?
I know wayyy many more definitions items for way many more different types of malware names have been added in the previous definitions updates. Yesterday’s definitions update had only 22 items and only 5 different malware names. Why so few now when I used the same Setup file as before?
I could see the amount of items being consolidated. But, the malware names being consolidated?
Something just doesn’t add up.
Yeah, I know that. But, I hate hate hate to register, join, create passwords for every friggin’ thing one does on the Net. So, I wasn’t looking forward to jumping through all those hoops and running through that obstacle course just to ask my question over there. I figured MAYBE someone here might know the answer.
Hi Chim, if I remember correctly, the free version of SAS (like the free version of MBAM) allows the option to install the latest definitions with a new installation. That is probably what happened.
Oh, I know that anytime I reinstall SAS I can update the definitions to the latest. Let me elaborate, Simion.
Okay, as I said, the SAS Setup file that I used is from way back on 1-26-2014 as I have it in the filename. Now let’s say that between 1-26-2014 to recently I had run 4 manual full scans. And before each scan I had updated the definitions. And between those 4 updates there had been a total of ohhh say … 50 items under 20 different malware names.
NOW … how can the latest SAS update that I performed yield only 22 items under 5 different malware names?
I could somewhat see the items being able to be consolidated, but not the malware names.
Oh well. Later today I’ll see about tossing the curiosity question over at the SAS forum.
Simple: Each update contains the entire definitions database including new additions, while the update report only contains the new additions for that update build. Can you see that?
It’s better for you to ask this question in SAS forum.
FYI: After you have registered into the SAS forum and click log out button and close the browser and open up the same browser again and go to SAS forum it will automatically log you in. The best browser for you to prevent this thing is to use mozilla firefox and under the setting for firefox make firefox “TO NOT REMEMBER HISTORY” by this way SAS forum won’t log you in automatically after you open up firefox browser.
So you firefox browser and make it not remember history. Log in to SAS forum click log out and close firefox. Open up firefox go to SAS forum you will see that it won’t log you in automatically it will ask you to enter your username and password.