Extra.dat is not working in win xp sp3 machines in my org. I tried copying the extra.dat into mcafee engine folder but after sometime it gets deleted automatically. It shows "No of signatures in extra.dat: None" Pls help me out..
as far as I know extra.dats have a limited lifetime of several days starting from their issuance date. After that they might be deleted by the product as superfluous. How long ago did you obtain your copy and what DAT versions was when you obtained the extra.dat? It might not be relevant today as the DAT has those signature already...
Does sound like the Extra.dat has "expired". That's the sort of behaviour I would expect from an expired extra.dat
What detection is it for? When did you get it, and how did you get it?
(Also note that if it's a "negative" extra.dat - for a false positive, it may not appear under the list of drivers in that extra.dat)Message was edited by: mjmurra on 11/12/10 9:48:02 PM
HI, we use mcafee 8.7.0i and its a licenced one. Engine version is 5400.1158 and dat version is 6195.0000 but still showing No of signatures in extra.dat: "None" and Names of threats that extra.dat can detect: "None". kindly help.. thanks in advance.
Note: Av and superdat is uptodate.
But what extra.dat are you trying to use? How did you obtain it, when did you obtain it, and what are the detection names you are expecting to see?
Also, if you launch the McAfee VirusScan console, then right click "On-Access Scanner", and view the Log, what is the last entry
13/12/2010 9:37:56 AM Engine version = 5400.1158
13/12/2010 9:37:56 AM AntiVirus DAT version = 6195.0
13/12/2010 9:37:56 AM Number of detection signatures in EXTRA.DAT = 1
13/12/2010 9:37:56 AM Names of detection signatures in EXTRA.DAT = Generic.Tra!cde341c61143 (ED)
12/13/2010 12:17:05 AM Engine version = 5400.1158
12/13/2010 12:17:05 AM AntiVirus DAT version = 6195.0
12/13/2010 12:17:05 AM Number of detection signatures in EXTRA.DAT = None
12/13/2010 12:17:05 AM Names of detection signatures in EXTRA.DAT = None.
what do you suggest?
Please review these two articles and see if any of them answers your concern:
https://kc.mcafee.com/corporate/index?page=content&id=KB52590&actp=search&viewlocale=en_US&searchid=... (see also Related Information)
Also for applying Extra.dat locally see this: https://kc.mcafee.com/corporate/index?page=content&id=KB50642&actp=search&viewlocale=en_US&searchid=...
Through ePO 4.0 see this: https://kc.mcafee.com/corporate/index?page=content&id=KB52977&actp=search&viewlocale=en_US&searchid=...
Hope these help.
Earlier it was like this
12/4/2010 5:29:34 PM Engine version = 5400.1158
12/4/2010 5:29:34 PM AntiVirus DAT version = 6186.0
12/4/2010 5:29:34 PM Number of detection signatures in EXTRA.DAT = 4
12/4/2010 5:29:34 PM Names of detection signatures in EXTRA.DAT = Generic.Tra!b299221812e2 (ED) Generic.Tra!b36f2913ec4f (ED) Generic.Tra!b3cf06fab7cf (ED) Generic.Tra!ec83b3829850 (ED)