Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
2944 Views 9 Replies Latest reply: Jan 21, 2013 12:06 PM by rmetzger RSS
northomsk Newcomer 36 posts since
Mar 19, 2012
Currently Being Moderated

Jan 17, 2013 8:42 AM

VSE 8.8.0 P3 does it include HF778101?

Hi all

 

Could i have a little bit of help, when it comes to VSE 8.8 P3

 

Does it include HF778101?

 

Reading KB51111 it doesnt say

Then looking on KB76727 it is attached to KB -> not included in P3

And Release Notes For 8.8.0 doesnt say if its included or not

 

Anybody out there who knows if HF778101 is included or not included

 

Thanks in advance

  • wwarren McAfee SME 766 posts since
    Nov 3, 2009
    Currently Being Moderated
    1. Jan 17, 2013 9:17 AM (in response to northomsk)
    Re: VSE 8.8.0 P3 does it include HF778101?

    Yes, it's included.

  • wwarren McAfee SME 766 posts since
    Nov 3, 2009
    Currently Being Moderated
    4. Jan 17, 2013 10:25 AM (in response to northomsk)
    Re: VSE 8.8.0 P3 does it include HF778101?

    It means Patch 3 includes hotfix 778101.

    Patch 2 does not. Patch 2 still needs the hotfix.

     

    Hotfix 820636 is needed by VSE 8.8 Patch 1, Patch 2, and Patch 3.

  • redrum Newcomer 4 posts since
    Apr 30, 2010
    Currently Being Moderated
    6. Jan 18, 2013 8:56 AM (in response to northomsk)
    Re: VSE 8.8.0 P3 does it include HF778101?

    Please, another question about this.

     

    I'm on VS8.8 SP2, HF 793781, on every computer and server.

     

    Could i update to SP3 directly and then to HF 820636 all systems?

     

    Or it should be better update SP2 to 793781 and then to 820636 prior to update to SP3?

     

    Thanks

  • rmetzger Champion 566 posts since
    Jan 4, 2005
    Currently Being Moderated
    7. Jan 18, 2013 1:07 PM (in response to redrum)
    Re: VSE 8.8.0 P3 does it include HF778101?

    Hi redrum,

     

    My belief is that a Service Pack will replace all files within as a Set, on to the system. Since 820636 is Post - SP3, and needed by all SPs, I would install the Service Pack 3 - Then 820636, in that order. I would do it this way, even if you already applied 820636 prior to SP3 deployment, to ensure 820636 changes are re-patched after SP3 is deployed.

     

    Remember, VSE v8.8 SP3 is for Windows 8 and Server 2012 exclusively. SP3 should not and will not patch other Windows versions. Hopefully you have very few systems to patch to SP3 and HF820636.

     

    As for HF793781, you should not need to apply this to any successfully updated system with DAT version past 6809, August 21, 2012.

     

    Hope this is helpful.

    Ron Metzger

  • redrum Newcomer 4 posts since
    Apr 30, 2010
    Currently Being Moderated
    8. Jan 21, 2013 3:42 AM (in response to rmetzger)
    Re: VSE 8.8.0 P3 does it include HF778101?

    Thank you very much for your reply.

     

    I'm deploying HF778101 and then also HF820636 on all my systems, because SP 3 is not for me, considering that i have no W8 or 2012 in place.

     

    However I can't understand why HF 778101 is a later HF than 793781.

     

    El mensaje fue editado por: redrum on 21/01/13 9:36:11 GMT

     

    El mensaje fue editado por: redrum on 21/01/13 9:42:05 GMT
  • rmetzger Champion 566 posts since
    Jan 4, 2005
    Currently Being Moderated
    9. Jan 21, 2013 12:06 PM (in response to redrum)
    Re: VSE 8.8.0 P3 does it include HF778101?

    Hi redrum,

     

    Your welcome.

     

    redrum wrote:

     

    However I can't understand why HF 778101 is a later HF than 793781.

    I don't think there is a 'relationship' between Hotfixes (HF), but rather between Support Packs (SP) which incorporates a collection of hotfixes.

     

    In this case HF820636 is not contained within any SPs as of this date.

    HF778101 came out prior to SP3 and  SP3 includes hotfix 778101, but was not inside SP2.

     

    So, I think your need to apply both of these Hotfixes is advised.

     

    As for HF793781: This is not really a fix that is needed anymore. It fixes a MfeRuntime*.DAT issue, with McShield.exe, that has long since past.

    (see https://kc.mcafee.com/corporate/index?page=content&id=KB76004&actp=search&viewlo cale=en_US&searchid=1358788846899 )

    HF793781:

     

    If you use VSE 8.8 and have not yet implemented DAT 6807 or 6808, do not apply either of these DAT versions. go directly to DAT 6809 or later.

     

    McAfee has identified an issue with DAT 6807 and 6808 that is causing intermittent issues with VirusScan Enterprise (VSE) 8.8.x. Specifically, these DATs can affect McShield.exe and may cause issues with the On-Access Scanner. If you have deployed either the 6807 or 6808 DAT, McAfee strongly recommends that you perform the remediation steps in the Solution.

     

    If you have deployed DAT 6807 or 6808 in your environment, you are affected by this issue, regardless of whether or not you were able to deploy DAT 6809. Hotfix 793781 or 793640 is REQUIRED to remediate. See the Solution section for how to obtain and deploy these hotfixes.

    . . .

    Systems affected by this issue may experience any of the following symptoms:

    • The On-Access Scanner (McShield.exe) will appear to be working. The process is running and visible in the Windows Task Manager.
    • Process Explorer shows no file handle open to the MfeRuntime*.DAT file.
    • DAT updates after 6807 appear to happen successfully. The DATs are copied into place, but are not loaded by McShield.exe.
    • The Windows System Event viewer on affected systems may have multiple entries for the following event IDs on McAfee processes such as mfehidk:
         
      • 512
      • 514
      • 516
      • 519

    . . .

    In the ePolicy Orchestrator (ePO) console, the system properties for computers with this issue will report the DAT/Engine versions as follows:

     

    DAT Date0/0/0
    DAT Version0.0000
    Engine Version0.0000

     

    We are Far past DAT 6807 and 6808, so implementing this would be unneccesary unless you installed a base image of VSE that also used DAT 6807 or 6808. Unless you are seeing these DAT Date/Version/Engine numbers, or the other symptoms listed above, it is not needed.

     

    I suppose if you have systems that passed thru these DAT versions (around August 27, 2012) then you might need to apply it. If you feel the need to deploy this Hotfix, then start with the smaller HF793781 followed by the latest SuperDAT to apply the latest DAT and MFEruntime*.DAT file. I would implement this on a case-by-case basis.

     

    Hopefully this makes it a bit clearer.

    Ron Metzger

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points