Re: Sophie Error: "The main body of virus data is out of date"

On Mon, Jun 27, 2005 at 04:22:01PM -0400, [email protected] wrote:
 
> I've found that while Sophos claims that new .ide files will not be 
> compatable with engines 3 months out of date, they do give you a month or 
> so of leeway (although with the number of viruses I get hit by, and the 
> amount of new stuff I see regularly, I normally update my engine every two 
> months or so), even though I get new .ide files several times a day.
> So, even if some .ide files are older than 90 days, they may continue to 
> work, but some newer .ide files won't work with your engine.

It is important to tidy up old IDEs.  I didn't used to do this, as the
instruction to do so is hidden deep in the knowledge base (or was then,
anyway).

One day I found that some of our machines were letting a particular
virus through.  By a long process of elimination I narrowed it down to
just one old IDE, roughtly a year old.  Remove the IDE (or test on a new
machine that didn't have it) and the virus got caught.  Replace the IDE
and it let the virus through.  Waaahhhh...

Nick