1 2 Previous Next 13 Replies Latest reply on Jun 6, 2013 8:24 AM by amandajayne

    Update successful, but DAT not updating

      Not sure if this is the correct location to be asking this, or if I need to be asking in the ePO forum..

       

      I have one Server that is being a bit problematic. Checking on the VirusScan console shows that the last update was successful, but checking "about" shows the product is out of date.

       

      The server is managed by ePO and the agent appears to be reporting correctly. I have reinstalled the AV, but the issue remained. I have ran SDAT's on the server, but the issue remains. Prior to this there were generic Script errors, since these, the update "Appears" to be running correctly.

       

      I cannot get my head round this, has anyone seen something similar?

       

      TIA

        • 1. Re: Update successful, but DAT not updating

          Oops. Should have mentioned, it's a Server 2003 R2 server, VSE 8.7 patch 4, MA 4.5, ePO 4.5

          • 2. Re: Update successful, but DAT not updating
            alexn

            Restart McAfee framework Service on machine in ?.

            • 3. Re: Update successful, but DAT not updating
              alexn

              Post AutoUPdate logs.

              • 4. Re: Update successful, but DAT not updating

                I have restarted all the services, with no joy.

                 

                03/06/2013    17:11:14    NT AUTHORITY\SYSTEM    Starting task: AutoUpdate

                03/06/2013    17:11:15    NT AUTHORITY\SYSTEM    Checking update packages from repository ePO_CDF-BSE-DC-01.

                03/06/2013    17:11:15    NT AUTHORITY\SYSTEM    Initializing update...

                03/06/2013    17:11:15    NT AUTHORITY\SYSTEM    Verifying catalog.z.

                03/06/2013    17:11:15    NT AUTHORITY\SYSTEM    Extracting catalog.z.

                03/06/2013    17:11:15    NT AUTHORITY\SYSTEM    Loading update configuration from: catalog.xml

                03/06/2013    17:11:16    NT AUTHORITY\SYSTEM    These updates will be applied if they are in the repository:  Engine, DAT, VSCANCEU1000, EXTRADAT1000, BOCVSE__1000, VIRUSCAN8700.

                03/06/2013    17:11:16    NT AUTHORITY\SYSTEM    Downloading PkgCatalog.z.

                03/06/2013    17:11:16    NT AUTHORITY\SYSTEM    Verifying PkgCatalog.z.

                03/06/2013    17:11:16    NT AUTHORITY\SYSTEM    Extracting PkgCatalog.z.

                03/06/2013    17:11:16    NT AUTHORITY\SYSTEM    Loading update configuration from: PkgCatalog.xml

                03/06/2013    17:11:17    NT AUTHORITY\SYSTEM    Verifying V2engdet.mcs.

                03/06/2013    17:11:18    NT AUTHORITY\SYSTEM    Product(s) running the latest Engine.

                03/06/2013    17:11:18    NT AUTHORITY\SYSTEM    Downloading PkgCatalog.z.

                03/06/2013    17:11:18    NT AUTHORITY\SYSTEM    Verifying PkgCatalog.z.

                03/06/2013    17:11:18    NT AUTHORITY\SYSTEM    Extracting PkgCatalog.z.

                03/06/2013    17:11:18    NT AUTHORITY\SYSTEM    Loading update configuration from: PkgCatalog.xml

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Verifying V2datdet.mcs.

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Product(s) running the latest DATs.

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Verifying BocDet_VSE.McS.

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Searching available updates for BOC DAT.

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Downloading PkgCatalog.z.

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Verifying PkgCatalog.z.

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Extracting PkgCatalog.z.

                03/06/2013    17:11:19    NT AUTHORITY\SYSTEM    Loading update configuration from: PkgCatalog.xml

                03/06/2013    17:11:20    NT AUTHORITY\SYSTEM    Product(s) running the latest BOC DAT.

                03/06/2013    17:11:20    NT AUTHORITY\SYSTEM    Verifying VSE870Det.McS.

                03/06/2013    17:11:20    NT AUTHORITY\SYSTEM    Searching available updates for McAfee VirusScan Enterprise 8.7.0.

                03/06/2013    17:11:20    NT AUTHORITY\SYSTEM    The following packages were not in the repository:  VSCANCEU1000, EXTRADAT1000.

                03/06/2013    17:11:20    NT AUTHORITY\SYSTEM    Update Finished

                04/06/2013    17:37:08    NT AUTHORITY\SYSTEM    Starting task: AutoUpdate

                04/06/2013    17:37:10    NT AUTHORITY\SYSTEM    Checking update packages from repository ePO_CDF-BSE-DC-01.

                04/06/2013    17:37:10    NT AUTHORITY\SYSTEM    Initializing update...

                04/06/2013    17:37:10    NT AUTHORITY\SYSTEM    Verifying catalog.z.

                04/06/2013    17:37:10    NT AUTHORITY\SYSTEM    Extracting catalog.z.

                04/06/2013    17:37:10    NT AUTHORITY\SYSTEM    Loading update configuration from: catalog.xml

                04/06/2013    17:37:11    NT AUTHORITY\SYSTEM    These updates will be applied if they are in the repository:  Engine, DAT, VSCANCEU1000, EXTRADAT1000, BOCVSE__1000, VIRUSCAN8700.

                04/06/2013    17:37:11    NT AUTHORITY\SYSTEM    Downloading PkgCatalog.z.

                04/06/2013    17:37:11    NT AUTHORITY\SYSTEM    Verifying PkgCatalog.z.

                04/06/2013    17:37:11    NT AUTHORITY\SYSTEM    Extracting PkgCatalog.z.

                04/06/2013    17:37:11    NT AUTHORITY\SYSTEM    Loading update configuration from: PkgCatalog.xml

                04/06/2013    17:37:12    NT AUTHORITY\SYSTEM    Verifying V2engdet.mcs.

                04/06/2013    17:37:13    NT AUTHORITY\SYSTEM    Product(s) running the latest Engine.

                04/06/2013    17:37:13    NT AUTHORITY\SYSTEM    Downloading PkgCatalog.z.

                04/06/2013    17:37:13    NT AUTHORITY\SYSTEM    Verifying PkgCatalog.z.

                04/06/2013    17:37:13    NT AUTHORITY\SYSTEM    Extracting PkgCatalog.z.

                04/06/2013    17:37:13    NT AUTHORITY\SYSTEM    Loading update configuration from: PkgCatalog.xml

                04/06/2013    17:37:14    NT AUTHORITY\SYSTEM    Verifying V2datdet.mcs.

                04/06/2013    17:37:14    NT AUTHORITY\SYSTEM    Downloading PkgCatalog.z.

                04/06/2013    17:37:15    NT AUTHORITY\SYSTEM    Verifying PkgCatalog.z.

                04/06/2013    17:37:15    NT AUTHORITY\SYSTEM    Extracting PkgCatalog.z.

                04/06/2013    17:37:15    NT AUTHORITY\SYSTEM    Loading update configuration from: PkgCatalog.xml

                04/06/2013    17:37:16    NT AUTHORITY\SYSTEM    Starting DAT update.

                04/06/2013    17:37:16    NT AUTHORITY\SYSTEM    Downloading DAT.

                04/06/2013    17:37:16    NT AUTHORITY\SYSTEM    Downloading gdeltaavv.ini.

                04/06/2013    17:37:16    NT AUTHORITY\SYSTEM    Downloading 70947095avv.gem.

                04/06/2013    17:38:59    NT AUTHORITY\SYSTEM    Pre-notifying for DAT update.

                04/06/2013    17:38:59    NT AUTHORITY\SYSTEM    Copying DAT.

                04/06/2013    17:39:48    NT AUTHORITY\SYSTEM    Update succeeded to version 7095.0000.

                04/06/2013    17:39:58    NT AUTHORITY\SYSTEM    The deployment task will be re-tried in 5 minutes because Updater is in progress.

                04/06/2013    17:39:59    NT AUTHORITY\SYSTEM    Post-notifying for DAT update.

                04/06/2013    17:40:21    NT AUTHORITY\SYSTEM    Pre-notifying for DAT update.

                04/06/2013    17:40:21    NT AUTHORITY\SYSTEM    Backing up file(s) Engine DAT

                04/06/2013    17:40:21    NT AUTHORITY\SYSTEM    Copying DAT.

                04/06/2013    17:40:22    NT AUTHORITY\SYSTEM    Update succeeded to version 7095.0000.

                04/06/2013    17:40:22    NT AUTHORITY\SYSTEM    Post-notifying for DAT update.

                04/06/2013    17:40:54    NT AUTHORITY\SYSTEM    Verifying BocDet_VSE.McS.

                04/06/2013    17:40:56    NT AUTHORITY\SYSTEM    Searching available updates for BOC DAT.

                04/06/2013    17:40:56    NT AUTHORITY\SYSTEM    Downloading PkgCatalog.z.

                04/06/2013    17:41:00    NT AUTHORITY\SYSTEM    Verifying PkgCatalog.z.

                04/06/2013    17:41:00    NT AUTHORITY\SYSTEM    Extracting PkgCatalog.z.

                04/06/2013    17:41:00    NT AUTHORITY\SYSTEM    Loading update configuration from: PkgCatalog.xml

                04/06/2013    17:41:05    NT AUTHORITY\SYSTEM    Product(s) running the latest BOC DAT.

                04/06/2013    17:41:05    NT AUTHORITY\SYSTEM    Verifying VSE870Det.McS.

                04/06/2013    17:41:06    NT AUTHORITY\SYSTEM    Searching available updates for McAfee VirusScan Enterprise 8.7.0.

                04/06/2013    17:41:07    NT AUTHORITY\SYSTEM    The following packages were not in the repository:  VSCANCEU1000, EXTRADAT1000.

                04/06/2013    17:41:07    NT AUTHORITY\SYSTEM    Update Finished

                • 5. Re: Update successful, but DAT not updating
                  alexn
                  The following packages were not in the repository:  VSCANCEU1000, EXTRADAT1000.


                  aman,

                   

                  I have seen this log.Your DAT is successful while VSCANCE1000 which is Engine  is not successful.Usually Engines updates are not required or you can say when McAfee releases new engine then this is applicable.Same For Extradat1000 which contains detection codes for a temporary period of time for viruses not yet included in the incremental or full DAT set. These are generally only dispatched to customers as they are reported to AVERT and are unlikely to be available on the FTP site.

                  To get rid of this  please follow me here

                   

                  • Launch the VirusScan Console.
                  • Right-click AutoUpdate and select Properties.
                  • Under Update Options, deselect Get newer detection engine and dats if available.
                  • Click Apply, then OK.

                    Reportback if it fixes.

                  Alexn from Space

                  • 6. Re: Update successful, but DAT not updating

                    Hi Alexn,

                     

                    I have tried as you suggested, then run an update. The DAT version is still not showing as updated even though the update was apparently successful.

                     

                    Thanks for your help so far though

                    • 7. Re: Update successful, but DAT not updating
                      alexn

                      Humm. no worries.

                       

                      Do you see Mcscan32.dll file in this location (Install Directory)\McAfee\VirusScan Enterprise\RepairCache\Engine right click this file and make sure that the engine version is 5400.1158.

                       

                      Now on EPO machine Run a Master Repository Pull Tas and then

                      look for folder Virusscan1000 under this location  <Installed Directory>\McAfee\ePolicy Orchestrator\DB\Software\Current

                       

                      .Once confirmed.Open ePo console and create a Product UPdate Task sellecting all Packages.

                      NMow under system Tree select this machine and Go for Option "Run Client task now>Select Product update task that you just created.Let the task be finishd.

                       

                      Let me know if it resolves.

                      • 8. Re: Update successful, but DAT not updating

                        Version of Mcscan32.dll is 5400.1158.

                        There is no Viruscan1000 folder, there are Viruscan8600 and Viruscan8700 folders

                        Update does not apear to have worked.

                        • 9. Re: Update successful, but DAT not updating
                          Attila Polinger

                          Hello,

                           

                          you can follow actual update logs in McScript.log (in the same folder as the log you have copied excerpt from). Please review if somethings useful to troubleshoot is visible around DAT download and service stop and start.

                           

                          If there is no visible and useful error message, please make sure that log level of 8 is set by following this article: KB56207. Re-try the update and review the above log again to see if anything useful appears.

                           

                          Prior to this, however please check if you have enough free space on the %TEMP% or %TMP% folder and also, if these values point to a meaningful location (for example the path uses an existing folder hierarchy).

                           

                          Attila

                          1 2 Previous Next