MSE Updates

[lior]

While I've only had MSE for about a week (I like the way it's integrated into Windows and the small memory print), I'm concerned about how infrequent the updates are. Although MS says the program will download definition updates automatically, there's no way to manually enable it. The update is essentially on auto pilot. Moreover, even though I've been using my system regularly for the past two days and always connected to the Internet, the program never updated for the past 48 hours. It would only update if I manually update it, which to me is unacceptable for modern anti-virus software. On my XP system, Avast updates at least 3 times a day, let alone not even once in 48 hours. Am I missing something?

 

[Orpheous]

If you open MSE, and go into the settings, it allows you to change the scan frequency to daily. Beneath that it says that it will scan for definitions before scanning. You can also check the box to only allow scanning when the pc's not in use.
That's the only way that I've found, that's not to say it's the only way though.

 

[jav]

MSE will auto update itself.
1. If you put scheduled scan (you can put just Quick Scan), at some given time.
So it will update it's definitions before scheduled scan everyday.

2. Put Windows update check for updates at some given time everyday, so it will update MSE definitions aswell.
http://www.sevenforums.com/windows-update/2797-windows-update-settings-change.html

So now, you are updating your MSE definitions atlest twice a day.

 

[hackerman1]

hi !

yes.
you can change settings to do a daily scan & to update before scanning.

also take a look at my post:
http://www.sevenforums.com/windows-update/34679-how-update-mse-without-windows-update.html

 

[Jacee]

There is an "upgrade" today that I'm installing right now.

 

[jav]

ok, there you go:
Updating MSE when PC started is it possible.
But I bet you can put this command into task scheulder aswell.

"C:\Program Files\Microsoft Security Essentials\MpCmdRun.exe" -SignatureUpdate

 

[UrbanBounca]

There is an "upgrade" today that I'm installing right now.

Is it an actual MSE software upgrade or simply a definition update? I've noticed that MS releases a new definition update daily around 4a EST.

 

[lior]

Thanks all for the responses. Why am I not surprised at Microsoft's stupidity to make such a simple option so tedious.

1) My WU is set to automatic install. As such, if there are any updates available my system will download and install automatically. My MSE scheduled scan interval is set for weekly, which is what I prefer.

2) The system I'm using MSE on is at very low risk for any viruses or trojans, which is one of the main reasons I changed to MSE. I don't need these bulky "security" suites. I also have very few programs installed on this system, all legally licensed.

3) I think it's quite redundent that to get the latest definition updates I have to practically schedule a daily scan. What if I only want to scan my system once or twice a week? The definitions for the real-time protection still need to be updated in the meanwhile.

Jav: I think the command line option may be the best workaround yet. I'll try it later today.

 

[UrbanBounca]

Thanks all for the responses. Why am I not surprised at Microsoft's stupidity to make such a simple option so tedious.

1) My WU is set to automatic install. As such, if there are any updates available my system will download and install automatically. My MSE scheduled scan interval is set for weekly, which is what I prefer.

2) The system I'm using MSE on is at very low risk for any viruses or trojans, which is one of the main reasons I changed to MSE. I don't need these bulky "security" suites. I also have very few programs installed on this system, all legally licensed.

3) I think it's quite redundent that to get the latest definition updates I have to practically schedule a daily scan. What if I only want to scan my system once or twice a week? The definitions for the real-time protection still need to be updated in the meanwhile.

Jav: I think the command line option may be the best workaround yet. I'll try it later today.

You can set it to daily, and check the box with something around the lines of "Only scan my system when it's not in use and idle..." It's right below the "Download updates before system scan..." check box.

 

[ignatzatsonic]

I do not use scheduled scans.

I never choose to manually update.

I accept the default auto updates and receive them every 36 to 48 hours.

MSE uses a cloud technology to protect the user from threats that are not in the most recently installed definition database. Any unknown threat is evaluated through the cloud.

It seems to work OK--by which I mean I have not had a single issue since I installed MSE about 6 weeks ago. I periodically run scans with other programs and they have not picked up anything.

If I ever have reason to doubt the efficacy of the cloud technology, I will start worrying. But as of now, no issues.

I did see some comments on a Microsoft forum that MS may be changing the update technique in an upcoming release, but no details were known at that time.

 

[Jacee]

There is an "upgrade" today that I'm installing right now.

Is it an actual MSE software upgrade or simply a definition update? I've noticed that MS releases a new definition update daily around 4a EST.

Mine is an actual software upgrade.

 

[MacGyvr]

Mine updates at least once a day with no ...cough... interference from me. I recommend you leave it alone and let it work as designed.

 

[hackerman1]

There is an "upgrade" today that I'm installing right now.

Is it an actual MSE software upgrade or simply a definition update? I've noticed that MS releases a new definition update daily around 4a EST.

MSE is normally updated 3 times / day.

 

[lior]

Doesn't work for me. I just installed an update right now. The last definition update I had was created at 5am this morning. Since then a new update came out at 1pm that the program didn't fetch. I had to once again update manually. Microsoft may indeed be updating the definitions 3 times a day, but for me it isn't automatic. The whole point of an effective anti-virus is to get the new signature file as soon as it's released, not a day after.

 

[lior]

I will keep an eye on it in the activity panel of Windows Update. Updates for MSE are listed there. So far I confirmed what I suspected: the program isn't updating automatically every day.

 

[jav]

ok, For those of you who is interested on more information:
Update flaw in MSE
MSE Definitions/Signatures Update FAQ
Updating Virus and Spyware Definitions Forum

Hope it will help you guys

 

[lior]

Microsoft has confirmed an issue with Microsoft Security Essentials that can occur when some PCs are regularly offline for extended periods and are frequently toggled between sleep/hibernate and active mode. In some cases, these machines may be delayed in receiving their regularly scheduled signature updates.

Microsoft is aware of the problem and is working on a solution.
...

Apparently this is well-known issues that's been going on for months.

 

[lior]

Further information for those experiencing the same problem. It seems that MSE's update program is on auto-pilot most of the time which is good thing as long as it works properly.

The Microsoft Antimalware group deploys updates for MSE (also Forefront and Windows Live OneCare) typically a few times daily. It is not critical for you to check for updates throughout the day because when MSE checks for updates, the offered updates will be downloaded and added to the database.

MSE will report that it is up to date and in good status even if the definitions are a few days old on the PC. Note that MSE uses the local signatures for common protection, but it also employs behavioral detection. If suspicious activity is detected, MSE will communicate with the servers to determine if a match has been reported and will immediately download any information needed to deal with the threat if a match is found.

Updates are a once per 24 hour check on a schedule determined by MSE. There is no setting within MSE to change the scheduled time or frequency.

Optionally, you can add a check for updates by setting check for updates before scan and setting up a scheduled scan daily (for a time when the PC will be on as it won't run a missed scan later).

MSE will also check 10 minutes or so after boot or wake from sleep if there is a
network connection *and* the current updates are greater than 24 hours old.
It will *not* perform this catch up check if the current definitions were installed within the past 24 hours, but will wait until the next scheduled check time.

** This "catch up" check is apparently not always working for people on wake
from sleep/standby/hibernate. Microsoft is aware of this problem and are working to fix this in a future release. So, if the PC happens to be asleep when the scheduled check is supposed to happen, and you don't have the extra check enabled, and you don't reboot, you can have older definitions. In some cases, several days old.