Microsoft KB Archive/905956

= The Antigen Worm list is not updated as frequently as the antivirus scan engines in Antigen =

Article ID: 905956

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Antigen for Exchange
 * Microsoft Antigen for SMTP Gateways
 * Sybari Antigen 8.0 for Microsoft Exchange
 * Sybari Antigen 8.0 for Microsoft SharePoint Portal Server
 * Sybari Antigen 8.0 for SMTP Gateways
 * Sybari Antigen 8.0 for IM
 * Sybari Antigen 7.5 for Microsoft Exchange
 * Sybari Antigen 7.5 for Microsoft SharePoint Portal Server
 * Sybari Antigen 7.5 for SMTP Gateways
 * Sybari Antigen 7.5 for IM

-



INTRODUCTION
This article describes why the Antigen Worm list is not updated as frequently as the antivirus scan engines are updated.



MORE INFORMATION
The definitions in the Antigen Worm list differ from the definitions that are used by the antivirus scan engines. The Antigen Worm list includes generic worm name entries. These entries may help provide protection against future worms that are part of a worm family that has already been detected.

For example, if a new worm that is called &quot;Win32/abcdef.A@mm&quot; is detected, Antigen updates the Antigen Worm list to include a generic entry such as &quot;*abcdef*&quot;. This entry covers any new variant of the same virus, such as Win32/abcdef.M@mm. Because the Antigen Worm list contains generic worm name entries, the Antigen Worm list does not have to be updated as frequently as the antivirus scan engines are updated.

Additional query words: AV scan engine Anti-virus

Keywords: kbtshoot KB905956

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.