9 Replies Latest reply: Jan 21, 2013 12:06 PM by rmetzger RSS

    VSE 8.8.0 P3 does it include HF778101?

    northomsk

      Hi all

       

      Could i have a little bit of help, when it comes to VSE 8.8 P3

       

      Does it include HF778101?

       

      Reading KB51111 it doesnt say

      Then looking on KB76727 it is attached to KB -> not included in P3

      And Release Notes For 8.8.0 doesnt say if its included or not

       

      Anybody out there who knows if HF778101 is included or not included

       

      Thanks in advance

        • 1. Re: VSE 8.8.0 P3 does it include HF778101?
          wwarren

          Yes, it's included.

          • 2. Re: VSE 8.8.0 P3 does it include HF778101?
            northomsk

            Hi

             

            thanks for that

            • 3. Re: VSE 8.8.0 P3 does it include HF778101?
              northomsk

              Hi again

               

              Sorry for this but i really need to ask you follwing

               

              Yes HF778101 is included...

              When included does this mean if i would check in P3 and deploy, the part of the patch that will be installed on non W8 and W2012 will be P2 and then the HF778101 is included in the P2 part?

              Also the later HF820636 is it included same way as HF778101

               

              Deploy P3, my W8 and W2012 will have P3

              And all the rest will have P2 and the Hotfixes

               

              Message was edited by: northomsk on 1/17/13 10:22:36 AM CST
              • 4. Re: VSE 8.8.0 P3 does it include HF778101?
                wwarren

                It means Patch 3 includes hotfix 778101.

                Patch 2 does not. Patch 2 still needs the hotfix.

                 

                Hotfix 820636 is needed by VSE 8.8 Patch 1, Patch 2, and Patch 3.

                • 5. Re: VSE 8.8.0 P3 does it include HF778101?
                  northomsk

                  Thanks for a quick reply

                  That explains it all

                  • 6. Re: VSE 8.8.0 P3 does it include HF778101?
                    redrum

                    Please, another question about this.

                     

                    I'm on VS8.8 SP2, HF 793781, on every computer and server.

                     

                    Could i update to SP3 directly and then to HF 820636 all systems?

                     

                    Or it should be better update SP2 to 793781 and then to 820636 prior to update to SP3?

                     

                    Thanks

                    • 7. Re: VSE 8.8.0 P3 does it include HF778101?
                      rmetzger

                      Hi redrum,

                       

                      My belief is that a Service Pack will replace all files within as a Set, on to the system. Since 820636 is Post - SP3, and needed by all SPs, I would install the Service Pack 3 - Then 820636, in that order. I would do it this way, even if you already applied 820636 prior to SP3 deployment, to ensure 820636 changes are re-patched after SP3 is deployed.

                       

                      Remember, VSE v8.8 SP3 is for Windows 8 and Server 2012 exclusively. SP3 should not and will not patch other Windows versions. Hopefully you have very few systems to patch to SP3 and HF820636.

                       

                      As for HF793781, you should not need to apply this to any successfully updated system with DAT version past 6809, August 21, 2012.

                       

                      Hope this is helpful.

                      Ron Metzger

                      • 8. Re: VSE 8.8.0 P3 does it include HF778101?
                        redrum

                        Thank you very much for your reply.

                         

                        I'm deploying HF778101 and then also HF820636 on all my systems, because SP 3 is not for me, considering that i have no W8 or 2012 in place.

                         

                        However I can't understand why HF 778101 is a later HF than 793781.

                         

                        El mensaje fue editado por: redrum on 21/01/13 9:36:11 GMT

                         

                        El mensaje fue editado por: redrum on 21/01/13 9:42:05 GMT
                        • 9. Re: VSE 8.8.0 P3 does it include HF778101?
                          rmetzger

                          Hi redrum,

                           

                          Your welcome.

                           

                          redrum wrote:

                           

                          However I can't understand why HF 778101 is a later HF than 793781.

                          I don't think there is a 'relationship' between Hotfixes (HF), but rather between Support Packs (SP) which incorporates a collection of hotfixes.

                           

                          In this case HF820636 is not contained within any SPs as of this date.

                          HF778101 came out prior to SP3 and  SP3 includes hotfix 778101, but was not inside SP2.

                           

                          So, I think your need to apply both of these Hotfixes is advised.

                           

                          As for HF793781: This is not really a fix that is needed anymore. It fixes a MfeRuntime*.DAT issue, with McShield.exe, that has long since past.

                          (see https://kc.mcafee.com/corporate/index?page=content&id=KB76004&actp=search&viewlo cale=en_US&searchid=1358788846899 )

                          HF793781:

                           

                          If you use VSE 8.8 and have not yet implemented DAT 6807 or 6808, do not apply either of these DAT versions. go directly to DAT 6809 or later.

                           

                          McAfee has identified an issue with DAT 6807 and 6808 that is causing intermittent issues with VirusScan Enterprise (VSE) 8.8.x. Specifically, these DATs can affect McShield.exe and may cause issues with the On-Access Scanner. If you have deployed either the 6807 or 6808 DAT, McAfee strongly recommends that you perform the remediation steps in the Solution.

                           

                          If you have deployed DAT 6807 or 6808 in your environment, you are affected by this issue, regardless of whether or not you were able to deploy DAT 6809. Hotfix 793781 or 793640 is REQUIRED to remediate. See the Solution section for how to obtain and deploy these hotfixes.

                          . . .

                          Systems affected by this issue may experience any of the following symptoms:

                          • The On-Access Scanner (McShield.exe) will appear to be working. The process is running and visible in the Windows Task Manager.
                          • Process Explorer shows no file handle open to the MfeRuntime*.DAT file.
                          • DAT updates after 6807 appear to happen successfully. The DATs are copied into place, but are not loaded by McShield.exe.
                          • The Windows System Event viewer on affected systems may have multiple entries for the following event IDs on McAfee processes such as mfehidk:
                               
                            • 512
                            • 514
                            • 516
                            • 519

                          . . .

                          In the ePolicy Orchestrator (ePO) console, the system properties for computers with this issue will report the DAT/Engine versions as follows:

                           

                          DAT Date0/0/0
                          DAT Version0.0000
                          Engine Version0.0000

                           

                          We are Far past DAT 6807 and 6808, so implementing this would be unneccesary unless you installed a base image of VSE that also used DAT 6807 or 6808. Unless you are seeing these DAT Date/Version/Engine numbers, or the other symptoms listed above, it is not needed.

                           

                          I suppose if you have systems that passed thru these DAT versions (around August 27, 2012) then you might need to apply it. If you feel the need to deploy this Hotfix, then start with the smaller HF793781 followed by the latest SuperDAT to apply the latest DAT and MFEruntime*.DAT file. I would implement this on a case-by-case basis.

                           

                          Hopefully this makes it a bit clearer.

                          Ron Metzger