Trilight Zone

[digital8]

By: John Gormly
Posted On: 5/2/2005

Spyware definitions are files that contain specific signature information that enables Windows AntiSpyware to detect and help protect you against spyware and adware. The Windows AntiSpyware definition library is regularly updated because new threats are identified. There are two methods that you can use to determine the version of the Windows AntiSpyware definition library, depending on your level of expertise.

For a list of the released versions of AntiSpyware, go here.

Method 1: Use the Help menu (for beginners to advanced users)

1. Start Windows AntiSpyware.
2. On the Help menu, click About Microsoft AntiSpyware.
3. Note the value for Spyware Definition Version. Compare this value with the version value in the "Released versions of Windows AntiSpyware definition library files" section .
4. Click OK to close the About Microsoft AntiSpyware dialog box.
5. If your spyware definition version is not the latest version, click Check for updates on the File menu, and then download and install the latest version.

Method 2: Examine the properties of the definition library files (for intermediate to advanced users)

1. Click Start, click Run, type %programfiles%\Microsoft Antispyware in the Open box, and then click OK.
2. Right-click the gcThreatAuditScanData.gcd file, and then click Properties.
3. Note the values in the Size and Modified fields.
4. Right-click the gcThreatAuditThreatData.gcd file, and then click Properties.
5. Note the values in the Size and Modified fields.
6. Compare the values that you obtained in steps 3 and 5 with the values in the "Released versions of Windows AntiSpyware definition library files" section.
7. Use the File Checksum Integrity Verifier (FCIV) utility to compute the MD5 or SHA-1 cryptographic hash values of the definition library files. Compare these values with the values in the "Released versions of Windows AntiSpyware definition library files" section. To do this, follow these steps:
a. Download and install the FCIV utility. For more information about how to obtain the FCIV utility, view the article in the Microsoft Knowledge Base:

841290 Availability and description of the File Checksum Integrity Verifier utility

b. Click Start, click Run, type cmd in the Open box, and then click OK.
c. At the command prompt, type the following command, and then press ENTER:
FCIV -md5 -sha1 %programfiles%\Microsoft Antispyware\gcThreatAuditScanData.gcd
d. At the command prompt, type the following command, and then press ENTER:
FCIV -md5 -sha1 %programfiles%\Microsoft Antispyware\gcThreatAuditThreatData.gcd

8. If your spyware definition version is not the latest version, click Check for updates on the File menu, and then download and install the latest version.

How to enable automatic updates (for beginners to advanced users)

The Windows AntiSpyware AutoUpdater service automates the process of downloading and installing the latest spyware definitions. You can have Microsoft AntiSpyware look for definition library updates and software updates on a set schedule by enabling the AutoUpdater options. To do this, follow these steps:
1. Start Windows AntiSpyware.
2. On the Options menu, click Settings.
3. Click to select the Enable automatic updates (recommended) check box.
4. From the Check for updates list, select how frequently you want Windows AntiSpyware to look for updates.
5. From the at list, select the time when you want Windows AntiSpyware to look for updates.
6. Click Save, and then click OK.