Difference between SuperDAT and DAT files?

[mcuser999]

I am running McAfee VSE 8.7i UNMANAGED, and I would like to know which is the most prefered DAT file to use in this case if NOT running managed.

Should I use SuperDATs or only DAT?

http://www.mcafee.com/apps/downloads/security-updates/security-updates.aspx

As far as I know, SuperDATs also should contain an updated scanning engine versions as well.

But what would be the best to use in an UNMANAGED system?

Thanks

[petersimmons]

Virus Scan will automatically attempt to download the latest DAT file. There is a default task that runs at 5PM local time every day. Let that run and you should be fine.

A Super DAT is a proprietary scripting language used by McAfee to accomplish almost anything. But the magic is that it is scripting by us (McAfee) that allows us to accomplish some work during the update cycle. One of the commone uses is for it to deliver an updated DAT file to a computer. Usually you won't need this.

[mcuser999]

Yes I know it has the default  daily 17:00 sheduling every day, but sometimes I have network issues and sometimes I have to reimage my PC and in that image, for example, last running DAT update was at 6800...Dont know for sure, but lets say for example purposes.

And when I usually restore an image, the first thing I do, is update Mcafee VSE which takes along time to download since the DAT 6800. And also some network connection issues as well.

So I always tend to download the latest DAT files from that above link JUST IN CASE I do have network connection issues.

All I want to know, is what DAT I should use? 

The SuperDAT or just the DAT?

In other words, should I use the 6956xdat.exe  or  the sdat6956.exe ?

Thanks again for the support.

Message was edited by: mcuser999 on 1/16/13 11:06:00 AM CST

[rmetzger]

The SuperDAT (sdatnnnn.exe)  also contains the Scan Engine in addition to the Signature files, whereas the xDat (nnnnXDAT.exe) does not contain the Scan Engine.

Current SuperDAT files contain the 5400.exe ( http://download.nai.com/products/licensed/superdat/engine/intel/5400/5400eng.exe ) scan engine.

So, after an image restore, you could update the signatures and engine in one download. (That's if you initial VSE image is using an old version of the Scan Engine, which hopefully is not true.) Similarly, you could download the Scan Engine once, and periodically download the smaller xDat signature file, saving time and money (on both sides). The choice is yours.

The SuperDAT is useful if ever you encounter a situation where the signature files or the runtime has become corrupted, or the engine files have updated improperly, leaving the system unstable or unprotected.

I would suggest reading the Readme.txt from McAfee's site for each download where many of these details are documented.

Hope this is helpful.

Ron Metzger

[petersimmons]

Just let it download the DAT file. You really only need the Super DAT if you are offline or otherwise need to bring it with you. If you have connectivity just let it download it.

[mcuser999]

That was my question. If I am offline, then what do I need to download?

The SuperDAT (sdatXXXX) or the DAT (XXXXxdat) ?

What would be the best prefered DAT file to download?

Thanks for the support.

[rmetzger]

mcuser999 wrote:
That was my question. If I am offline, then what do I need to download? 
The SuperDAT (sdatXXXX) or the DAT (XXXXxdat) ?
What would be the best prefered DAT file to download?

Well, I am assuming you already have a base install of VSE.

6956xdat.exe  or  the sdat6956.exe ?

Both files contain the Signature (DAT) files.

sdatxxxx.exe is about 5.5 MB larger than XXXXxDat.exe because sdatxxxx.exe also contains the Scan Engine (v5400).

You choose. No particular reason to use SDatxxxxx.exe over the smaller XXXXxDat.exe file if the Scan Engine is installed. Most likely you don't need the scan engine re-installed, so XXXXxDat.exe is probably the easiest to use.

From this site:

http://www.mcafee.com/apps/downloads/security-updates/security-updates.aspx?region=us

each tab for Dat and SuperDAT lists the most recent available file. Additionally, there is a ReadMe.txt associated with the .exe file you may download. Much of this info is discussed within the ReadMe.txt file.

Good luck,

Ron Metzger