Thank you - that is helpful for our understanding.

Would it be practical to take the "human element" out of the loop and just
have a scheduled script use WGET or similar batch application check for an
updated file on their HTTP server every hour? If the returncode indicates a
new file, download it and make it available without needing manual
intervention?

That's how many of us retrieve signature updates for third party scanners
several times daily.

-----Original Message-----
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Monday, December 29, 2008 3:11 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] AVG update

An FYI on the AV process.

Declude receives from AVG an email (example below) this is typically once
per day. On occasion we may get several per day or one in two days. As soon
as this email is received we download the latest definitions to our AVG
server and the definitions are available for your Decludeproc to retrieve.
Now depending on when this last check was done by your Declude - will
determine when you will get the AV sigs or what the time difference is
between release and update.

--------------------------------------------------------------------

The following virus database update has been prepared for you to download. 

--- SDK VDB Update Description ---
New Viruses: 
New Trojans: 
New Virus Variants: 
New Trojan Variants: Agent.ARGZ, Downloader.Zlob.AIFA, Generic12.AGYE,
BackDoor.Hupigon4.AXIM, Agent.ARLN, BackDoor.Generic10.AFRU

--- SDK VDB Update Files ---
avgsdk_ivdb2422.zip
avgsdk_vdb2422.zip

--- SDK VDB version.nfo ---
VDB_RELEASE_VERSION: 2422
PREVIOUS_VDB_RELEASE_VERSION: 2421
SEVERITY: critical
VDB_RELEASE_DATE: 2008-12-28 14:23
MODIFIED: microavi.avg
MODIFIED: incavi.avm
VDB_FILES_VERSION: 270.10.1/1867
REQUIRED_BIN_RELEASE_VERSION: 1.3.510

--- SDK VDB Update Notification End ---

--------------------------------------------------------------------

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com






---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to