1 Reply Latest reply on Mar 13, 2009 11:55 AM by rmetzger

    Event ID 257 for VirusScan 8.5


      We are using ePO 4 for SDAT daily deployment.
      While cross checking the Sdat deployment report on ePO system & on actual system. Report show as updated with latest sdat - 5551. How ever when we check on system it shows old sdat of Nov 2008.

      While going through event viwer we notice similar types of errors as shown below:

      Event Type: Information
      Event Source: McLogEvent
      Event Category: None
      Event ID: 257
      Date: 12/10/2008
      Time: 4:05:27 AM
      Computer: LG71282001
      The scan of C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Current\VSCANENG1000\V2EngDet.mcs has taken too long to complete and is being canceled. Scan engine version used is 5200.2160 DAT version 5433.0000.

      Please help me to resolve the issue.

      Thanks in advance for support.

        • 1. Old Engine.
          I suspect the older engine (5200) is the problem. Try checking in the 5300 engine into your ePO system (followed by 5301 as well, but that is optional). This may help in deploying the newer DATs.

          Alternatively, you could try downloading the latest SuperDAT and running it on the individual systems. This should update the Engine to 5300 and update the DATs at the same time.

          Hope this helps.
          Ron Metzger