7 Replies Latest reply on Dec 20, 2007 4:34 PM by Grif

    Updating McAfee Virusscan Enterprise

      Hi,

      I'm part of an IT dept. at a High School. We run Mcafee Virusscan enterprise (8.5i) on every system, and all but one work perfectly. The system in question is unable to update, it receives an error when trying to do so. I've looked up the error in the FAQ and tried both steps, but it didn't work. I tried removing Mcafee completely using the removal tool, and then reinstalling, but even that doesn't work as I get an error during install notifying me that it cannot run Mcafee Framework service (I do have sufficient rights).

      The OS used is Windows XP Pro.

      Any ideas on how to solve this issue?
        • 1. RE: Updating McAfee Virusscan Enterprise
          tonyb99
          What were to original errors you got on updateing were they framework errors relating to missing/unregistered dll files, if so you may need to reregister the dll files in system32.

          Can you post the install log for your attempted CMA/EPO agent install on the pc?
          • 2. Same problem
            I have had the same problem. I believe it is a corrupt file on McAfee's website as the file mentioned as being corrupt can not be found on my systems. The systems that are working correctly were installed earlier than the systems not working correctly, so perhaps that explains the issue. Anyway, here is the update log ... note the line that says "invalid virus definition files":


            12/14/2007 4:22:45 PM WKS-DISPATCH\Administrator Starting VirusScan task: AutoUpdate
            12/14/2007 4:22:45 PM WKS-DISPATCH\Administrator Starting update session.
            12/14/2007 4:22:46 PM WKS-DISPATCH\Administrator Checking update packages from repository NAIHttp.
            12/14/2007 4:23:00 PM WKS-DISPATCH\Administrator Initializing update...
            12/14/2007 4:23:00 PM WKS-DISPATCH\Administrator Verifying catalog.z.
            12/14/2007 4:23:00 PM WKS-DISPATCH\Administrator Extracting catalog.z.
            12/14/2007 4:23:00 PM WKS-DISPATCH\Administrator Loading update configuration from: Catalog.xml
            12/14/2007 4:23:01 PM WKS-DISPATCH\Administrator Verifying DATDet.mcs.
            12/14/2007 4:23:02 PM WKS-DISPATCH\Administrator Searching available updates for DATs.
            12/14/2007 4:23:02 PM WKS-DISPATCH\Administrator Downloading PkgCatalog.z.
            12/14/2007 4:23:03 PM WKS-DISPATCH\Administrator Verifying PkgCatalog.z.
            12/14/2007 4:23:03 PM WKS-DISPATCH\Administrator Extracting PkgCatalog.z.
            12/14/2007 4:23:03 PM WKS-DISPATCH\Administrator Loading update configuration from: PkgCatalog.xml
            12/14/2007 4:23:04 PM WKS-DISPATCH\Administrator Starting DAT update.
            12/14/2007 4:23:05 PM WKS-DISPATCH\Administrator Verifying delta.ini.
            12/14/2007 4:23:05 PM WKS-DISPATCH\Administrator Verifying dat-5186.zip.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Invalid virus definition files.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Update failed to version 4.0.5186.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Verifying EngDet.mcs.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Searching available updates for Engine.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Downloading PkgCatalog.z.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Verifying PkgCatalog.z.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Extracting PkgCatalog.z.
            12/14/2007 4:23:09 PM WKS-DISPATCH\Administrator Loading update configuration from: PkgCatalog.xml
            12/14/2007 4:23:10 PM WKS-DISPATCH\Administrator Starting Engine update.
            12/14/2007 4:23:11 PM WKS-DISPATCH\Administrator Update failed to version 5.2.00.
            12/14/2007 4:23:11 PM WKS-DISPATCH\Administrator Verifying VSE850Det.McS.
            12/14/2007 4:23:11 PM WKS-DISPATCH\Administrator Verifying EceptCntDet.mcs.
            12/14/2007 4:23:12 PM WKS-DISPATCH\Administrator Verifying MPEMSBCKDet.McS.
            12/14/2007 4:23:12 PM WKS-DISPATCH\Administrator Verifying MPEPRDCKDet.McS.
            12/14/2007 4:23:13 PM WKS-DISPATCH\Administrator Verifying MPESVRUPDet.McS.
            12/14/2007 4:23:13 PM WKS-DISPATCH\Administrator Verifying MPEVIRCKDet.McS.
            12/14/2007 4:23:13 PM WKS-DISPATCH\Administrator Verifying PatchTmpDet.McS.
            12/14/2007 4:23:13 PM WKS-DISPATCH\Administrator Verifying SK_det.mcs.
            12/14/2007 4:23:13 PM WKS-DISPATCH\Administrator Verifying PUPDet.mcs.
            12/14/2007 4:23:18 PM WKS-DISPATCH\Administrator Update Finished
            12/14/2007 4:23:27 PM WKS-DISPATCH\Administrator Closing the update session.


            Thanks for any help in resolving this issue.

            Warren
            RJR Paratransit
            • 3. RE: Same problem
              Warren,

              Please try this... Download and run the newest Superdat which will manually update to the 5200 scan engine and the newest definitions file.(Todays Superdat is named "sdat5186.exe". You may need to "AGREE" to the button when you first visit the site.) The next day, when there are updated definitions, see if it works. Sometimes, simply running the Superdat puts things back in order so the autoupdate will work.

              http://www.mcafee.com/apps/downloads/security_updates/superdat.asp?region=us&seg ment=enterprise

              By the way, as far as I'm aware, there is no "removal tool" for VS 8.5i.. You may need to manually uninstall it using the instructions in the link below. It's complicated but sometimes necessary to remove everything McAfee.:

              How to manually uninstall VirusScan Enterprise 8.5i

              You may also want to remove the McAfee Framework before reinstalling again.

              Manually uninstalling the Framework


              Hope this helps.

              Grif
              • 4. Problem solved
                Thanks for the help. That solved the problem. Was it a corrupted file on my computers? The source files put on the server might have a problem in that case.

                Thanks. Warren
                • 5. RE: Problem solved
                  Warren,

                  You didn't really say "what" fixed the issue.. Did running the superdat fix it or were you required to manually uninstall everything?

                  Either way, the update issue is frequently a problem with a bad installation but not necessarily with corrupt installation files.. Something "hangs' during the installation or and interruption occurs and the update mechanism loses its ability to detect the correct DAT information..

                  Hope this helps.

                  Grif
                  • 6. Sorry
                    Grif,

                    Sorry I wasn't more clear. Running the Superdat fixed it. Today, I got a message:

                    File SK_det.mcs is corrupt. Downloading complete file again.

                    The next line said the update completed and the console says it was successful so it seems to be OK.

                    Is that message anything to worry about?

                    Thanks.
                    Warren
                    • 7. RE: Sorry
                      Thanks for the response..

                      No need to worry.. The "SK_det.mcs is corrupt" happens almost every time I do such an update.. I'm not sure "why" it does it, but the second download of the same item seems to fix the corrupt file and the update is correct and complete. I now ignore that particular "SK_det.mcs is corrupt" message.

                      Hope this helps.

                      Grif