PDA

View Full Version : What do the + signs and numbers in brackets mean in posted weekly updates



Wizcrafts
2008-03-20, 06:16
I notice that in the weekly updates to the definition files, as posted on the Spybot S&D website, there are one, two or three plus signs in front of each detection and some also have a number afterward, in parenthesis.

Example: ++ Virtumonde.mhg (2911)

What does each + mean and what does the number in parenthesis indicate, for a given detection name and extension?

Thanks in advance

PepiMK
2008-03-20, 10:17
A single + means an updated product.
++ means a product that has been added new.
I don't think there are any with three plus signs, since this list is auto-generated with one or two only ;)

The number in brackets are the number of variants the detection covers. In this case, 2911 different samples were analyzed and compared to find a good common denominator for detection.

Wizcrafts
2008-03-20, 16:05
Thank you PepiMK. That clears up a lot of confusion.