I have been meaning to post about this for some time.
I don't understand why MS categorizes Microsoft Security Essentials updates as "optional". These should be rated important or critical.
Is everyone else using MSE experiencing this also - Or am I missing something in my update settings?
My guess would be so that if you have updates set to manual notification, you're not bothered by regular popups saying "1 important update is available".
And since MSE can update itself on a regular schedule (although that apparently requires the scheduled scan to be turned on), Windows Update is just another - optional - way of updating the definitions manually.
MSE sets its own update schedule - and effectively ignores the optionality of the update (and also any 'do not install' setting, I think). It will update itself prior to taking any action that needs it (such as a scan), and will generally download any update within 24hours, or on the next reboot. It uses the MU interface simply to avoid having to have separate updaters.
I also posted this same question in the Microsoft Answers forum & got a reply with a link to this thread:
MSE Definitions/Signatures Update FAQ - Microsoft Answers
It does explain the matter quite well, but it is still troubling to read that - unless, in some cases, you check manually for MSE updates, you could be missing the latest virus definitions by 1 to 7 days!
I didn't miss that, Noel. But here is a quote from the post that I don't believe is related to the hibernate/sleep issue:
"MSE will report that it is up to date until the signatures are greater than 7 days old. At that point, it will change the status to At Risk so that you can check for updates manually."
This is probably not an issue for most users, but why 7 days?
Plus - A lot of new viral "stuff" can be released into the web in a 24 hour period. Don't you agree?
MSE will attempt to update every 24 hours - but has to be connected to the internet to do so, and not all machines are permanently connected.
Therefore it would be pointless to flag it after a single 24-hour lapse.
7 days seems perfectly reasonable to me, as it will flag it to anyone who's been on holiday for a week, and also to anyone who's been disconnected, or had a breakdown, in sufficient time for remdial action before most threats become seriously dangerous.
Hello Noel. I'm going to let this go, but I have to ask you what you mean by - "before most threats become seriously dangerous." ?
If a virus is released into the web during that 24 hour lag time, it is already seriously dangerous - don't you agree?
A threat is always serious when it's present - but the last flash-flood virus was back in 2003, before firewalls were active in every PC. Unless the user is likely to be going to dangerous places (in which case I would suggest that MSE is not sufficient to the need) then a lapse of a few days will not usually hurt.
IIRC, many paid-for AV's don't flag for as long as two weeks.
Quote