DAT 6682 may trigger message scan failures and a subsequent system crashes in the following McAfee products:

[Aidan]

Temp\Safe issue was issue in RTW GSE701 - I believe fixed in GSE701 P1RU2  although  I'm verifying exact fix right now and will post again here . If running GSE 701 - I would strongly recommend  applying GSE701P1RU2 - its available at McAfee site with Grant number.

[Aidan]

Sorry for delay on this but yes issue is rectified and fix available in GSE701P1RU2.

[staro30]

Hi,

After we add the latest McAfee DAT via epo we notice that email builds up in the "Msgs waiting to be routed" queue. They do process but very slowly. We reboot the Exchange server and then msgs do not queue in the "Msgs waiting to be routed" queue!

This seems to have started after we applied the 'dodgy' DAT 6682. We applied McAfee's fix in 6683 which resolved the Exchange server crashing but we seem to be left with this residual problem.

We use epo 4 patch 4, Exch 2003 SP2 with Groupshield 7.01 on Windows 2003 Sp2.

Any ideas?

Thanks

Staro

[Aidan]

Are you seeing an issue only after autoupdates?? With scan failure or Errors in event log??

Are you running GSE701 P1 RU2 version (7.0.1405.103)??

[staro30]

Hi,

Yes, only seeing the queueing after doing an 'Update Now' from the Exchange server after putting the latest DAT onto EPO. The app log does not show anything. A reboot solves the queueing problem.

According to HKLM\Software\McAfee\Groupshield............ we have 7.0.0 with Service Pack = 1 and hotfixes = none. The GPS GUI states 7.0.716.103. The server in Win 2003 SP2.

There are a few MSExchangeIS events 9567 Unexpected error 'hex' occurred in 'EcVirusScanOneMessage'. But these events have been occurring since last year.

In the agent_servername_error.log there are errors (after the latest DAT is updated) stating it cannot find C:\Program Files\McAFee\Common Framework\0809\mueRes.dll. There is no 0809 directory - the latest is 0804.

We have done a repair from the Control Panel which didn't help.

Any actions/ideas?

Thanks

Staro

[Aidan]

Would strongly recommended installing GSE701 P1 RU2 - GSE701P1RU2.zip is available at mcafee download site and you can download with your grant number.

[staro30]

Thanks will try to get hold of that!

Staro

[Aidan]

What is version number of GSE??  Is GSE701P1RU2 Installed??

In registry

HKLM\Software\McAfee\Groupshield for Exchange\Systemstate

Or

HKLM\Software\WOW6432Node\McAfee\Groupshield for Exchange\Systemstate

Check
DatVersion = 6683.0000

Then in explorer does folder 6683.000 exist in <GSE Install folder>\bin\Dats and does it contain AVVScan, AVVNames, AVVClean dat files??

[chrispeterkelly]

We are at GSE701P1 with 6683. We are patching up to GSE701P1RU2 tonight in an attempt to resolve.