The Worm list is not updated as frequently as the antivirus scan engines in Antigen or Forefront Server

This article has been archived. It is offered "as is" and will no longer be updated.
INTRODUCTION
This article describes why the Worm list is not updated as frequently as the antivirus scan engines are updated in Microsoft Antigen, in Microsoft Forefront Security for Exchange Server, and in Microsoft Forefront Security for Office Communications Server.
MORE INFORMATION
The definitions in the Worm list differ from the definitions that are used by the antivirus scan engines. The Worm list includes generic worm name entries. These entries may help provide protection against future worms that are part of a worm family that has already been detected.

For example, if a new worm that is called "Win32/abcdef.A@mm" is detected, Antigen, Forefront Security for Exchange Server, and Forefront Security for Office Communications Server update the Worm list to include a generic entry such as "*abcdef*". This entry covers any new variant of the same virus, such as Win32/abcdef.M@mm. Because the Worm list contains generic worm name entries, the Worm list does not have to be updated as frequently as the antivirus scan engines are updated.
AV scan engine Anti-virus
Properties

Article ID: 905956 - Last Review: 12/09/2015 03:04:49 - Revision: 2.0

Microsoft Forefront Security for Exchange Server, Microsoft Forefront Security for Office Communications Server, Microsoft Antigen 9.0 for Exchange, Microsoft Antigen for SMTP Gateways, Sybari Antigen 8.0 for Microsoft Exchange, Sybari Antigen 8.0 for Microsoft SharePoint Portal Server, Sybari Antigen 8.0 for SMTP Gateways, Sybari Antigen 8.0 for IM

  • kbnosurvey kbarchive kbtshoot KB905956
Feedback