3 Replies Latest reply on Aug 27, 2009 6:05 AM by tonyb99

    8.5i will not update from http or EPO4, 30 out of 150 machines

      Virusscan 8.5i patch 8

      I have 30 machines (28 - with XP Pro mix of SP2 and SP3 / 2 - Server 2003 SP2) with this issue.

      Auto update does not update the DAT from either EPO4 or NAI http. Trying to find the problem, attempted reinstall of both client and agent on two of the machines. The status result is "The Update Failed" Here is a log.


      8/25/2009 9:37:20 AM EXCH3\administrator Starting task: AutoUpdate
      8/25/2009 9:37:21 AM EXCH3\administrator Starting update session.
      8/25/2009 9:37:21 AM EXCH3\administrator Checking update packages from repository NAIHttp.
      8/25/2009 9:37:22 AM EXCH3\administrator Initializing update...
      8/25/2009 9:37:22 AM EXCH3\administrator Verifying catalog.z.
      8/25/2009 9:37:22 AM EXCH3\administrator Extracting catalog.z.
      8/25/2009 9:37:23 AM EXCH3\administrator Loading update configuration from: Catalog.xml
      8/25/2009 9:37:24 AM EXCH3\administrator Downloading PkgCatalog.z.
      8/25/2009 9:37:24 AM EXCH3\administrator Verifying PkgCatalog.z.
      8/25/2009 9:37:24 AM EXCH3\administrator Extracting PkgCatalog.z.
      8/25/2009 9:37:24 AM EXCH3\administrator Loading update configuration from: PkgCatalog.xml
      8/25/2009 9:37:25 AM EXCH3\administrator Verifying V2engdet.mcs.
      8/25/2009 9:37:25 AM EXCH3\administrator Downloading PkgCatalog.z.
      8/25/2009 9:37:26 AM EXCH3\administrator Verifying PkgCatalog.z.
      8/25/2009 9:37:26 AM EXCH3\administrator Extracting PkgCatalog.z.
      8/25/2009 9:37:26 AM EXCH3\administrator Loading update configuration from: PkgCatalog.xml
      8/25/2009 9:37:27 AM EXCH3\administrator Starting Engine update.
      8/25/2009 9:37:27 AM EXCH3\administrator Downloading PkgCatalog.z.
      8/25/2009 9:37:28 AM EXCH3\administrator Verifying PkgCatalog.z.
      8/25/2009 9:37:28 AM EXCH3\administrator Extracting PkgCatalog.z.
      8/25/2009 9:37:28 AM EXCH3\administrator Loading update configuration from: PkgCatalog.xml
      8/25/2009 9:37:29 AM EXCH3\administrator Verifying V2datdet.mcs.
      8/25/2009 9:37:29 AM EXCH3\administrator Downloading PkgCatalog.z.
      8/25/2009 9:37:29 AM EXCH3\administrator Verifying PkgCatalog.z.
      8/25/2009 9:37:29 AM EXCH3\administrator Extracting PkgCatalog.z.
      8/25/2009 9:37:29 AM EXCH3\administrator Loading update configuration from: PkgCatalog.xml
      8/25/2009 9:37:30 AM EXCH3\administrator Starting DAT update.
      8/25/2009 9:37:31 AM EXCH3\administrator Downloading DAT.
      8/25/2009 9:38:56 AM EXCH3\administrator Pre-notifying for EngineDAT update.
      8/25/2009 9:38:56 AM EXCH3\administrator Copying Engine.
      8/25/2009 9:38:56 AM EXCH3\administrator Copying DAT.
        • 1. RE: 8.5i will not update from http or EPO4, 30 out of 150 machines
          I've had similar issues with 8.7i.

          Is the install of 8.5i completely fresh, or did you overwrite an existing version (8.0)?

          If you overwrite an existing version, sometimes the old registry keys are not deleted properly.

          First thing would be to completely uninstall (manually) both the McAfee Agent and McAfee VSE 8.5i from the client machine(s) with the problem.

          Once uninstalled, open regedit and browse to one of the following keys (depends which version you have installed).

          HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\ePolicy Orchestrator\Application Plugins


          or

          HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins


          Look for a key called VIRUSSCANXXXX (XXXX being a version number).

          Anything that isn't 8500, you should delete.

          I also suggest deleting the Network Associates and/or McAfee folders from C:\Program Files\ before reinstalling.

          90% of the time, this solves the problem for me.
          • 2. RE: 8.5i will not update from http or EPO4, 30 out of 150 machines
            tonyb99
            Whoaaaah there

            the plugins for vse 8.5 are named viruscan8600 so the advice given prev is inaccurate

            if you have already removed the agent and the vse software using add remove or epo or whatever and you have no other mcafee software installed then on reboot you can clear the keys below and all their subkeys, then reinstall agent and vse

            HKEY_LOCAL_MACHINE\SOFTWARE\McAfee



            HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates
            • 3. RE: 8.5i will not update from http or EPO4, 30 out of 150 machines
              tonyb99
              On the other hand you could provide the bit of the log after the bit you did so we can see whats actually happening when it fails, you cropped it too soon beofre any errors