MBAM 12/4/08

[alicez]

I downloaded updates for MBAM yesterday and it read:

Database version: 1455

Fingerprints loaded: 59623

Version 1.31

Tonight I did another download of a fairly large update for 12/4/08. It reads:

Database version: 1460

Fingerprints loaded: 59576

Version 1.31

Why are the Fingerprints that loaded this time LOWER than the previous ones?

Doesn't the "Database version" AND "Fingerprints loaded" INCREASE with each download?

Shouldn't the Fingerprints loaded be higher than 59623 (as they have been in the past)?

[exile360]

This means either some FP's were removed or a heuristic detection for a certain type of malware was added that allows many or all variants of it to be detected without an individual definition for each file/reg entry etc.

[alicez]

Thank you.

So I was wrong in thinking that both numbers will always INCREASE?

In some instances the number(s) will decrease? Both numbers, or just the FP?

This means either some FP's were removed or a heuristic detection for a certain type of malware was added that allows many or all variants of it to be detected without an individual definition for each file/reg entry etc.

[exile360]

The database version should always increase, but for the reasoned I mentioned previously, the number of fingerprints may increase or decrease.

[alicez]

Got it. Thanks Excile360

The database version should always increase, but for the reasoned I mentioned previously, the number of fingerprints may increase or decrease.

[nosirrah]

We added powerful heuristics that rendered multiple definitions obsolete .

We are not the typical antivirus or antimalware company that likes to trick its users with gigantic and completely meaningless definition count numbers .

If we have pointless definitions they get removed .

[exile360]

I appreciate it too, as it means I don't have like 50mb of databases to download each time I install the software.