The Worm list is not updated as frequently as the antivirus scan engines in Forefront Security for Exchange

This article describes why the Worm list in Microsoft Forefront Security for Exchange is not updated as frequently as the antivirus scan engines are updated.

In Forefront Security, the definitions in the Worm list differ from the definitions that are used by the antivirus scan engines. The Worm list includes generic worm name entries. These entries may help provide more protection against future worms that are part of a worm family that has already been detected. For example, if a new worm that is named "Win32/abcdef.A@mm" is detected, Forefront Security updates the Worm list to include a generic entry such as "*abcdef*". This entry covers any new variant of the same virus, such as Win32/abcdef.M@mm. Because the Worm list contains generic worm name entries, the Worm list does not have to be updated as frequently as the antivirus scan engines are updated.