3 Replies Latest reply: Aug 13, 2014 6:36 PM by rmetzger RSS

    Issue in cleaning McAfee exclusion list

    senthilmanick

      We are using "McAfee VirusScan Enterprise 8.8" and for adding exclusion list we use the cab file.

       

      Problem is even after removing the cab file the exclusion list is not getting removed. (I could also see this entry in registry)

       

      Is there a way to clean this? Is there any command to clean the exclusion list?

        • 1. Re: Issue in cleaning McAfee exclusion list
          rmetzger

          senthilmanick wrote:

           

          We are using "McAfee VirusScan Enterprise 8.8" and for adding exclusion list we use the cab file.

           

          Problem is even after removing the cab file the exclusion list is not getting removed. (I could also see this entry in registry)

           

          Is there a way to clean this? Is there any command to clean the exclusion list?

          Hi senthilmanick,

           

          Let me see if I understand your configuration correctly:

          1) Systems are NOT using ePO (systems are 'unmanaged' or 'stand alone').

          2) You used McAfee Installation Designer (MID) to create VSEcfg.cab with all customizations.

          3) You copy VSEcfg.cab to each system.

           

          Is that correct?

           

          If so:

           

          VSEcfg.cab is simply used to deploy the customizations to the workstation. Upon it's arrival, VSE sees the arrival and implements the changes from it's configuration. Once these changes occur, the file VSEcfg.cab sits idle and is not active.

           

          If at a later time, you make changes or somehow the configuration is corrupted, you can return to this configuration by:

          1) opening up the VirusScan Console

          2) Help

          3) Repair Installation

           

          This restores the system to the current VSEcfg.cab configuration. ALL settings are reset, not just exclusions.

           

          By removing VSEcfg.cab, you have essentially removed the repair capacity to your customizations. If you repeat the process above (VSE console, Help, Repair Installation) without VSEcfg.cab, you should be able to return to the default unmanaged configuration as if you started completely over. This should delete all custom scan jobs, exclusions, and anything else that was customized.

           

          Alternatively, you could create a new VSEcfg.cab file from some master system using MID, and redistribute that VSEcfg.cab file. This would contain the customizations you wish (or delete as configured in MID) as it is copied to each system.

           

          Second Alternative: Implement ePO and Manage each system.

           

          Hope this helps.

          Ron Metzger

          • 2. Re: Issue in cleaning McAfee exclusion list
            senthilmanick

            Hi Ron,

              You are right, I am doing this

             

            1) Systems are NOT using ePO (systems are 'unmanaged' or 'stand alone').

            2) Used McAfee Installation Designer (MID) to create VSEcfg.cab with all customizations.

            3) Copied VSEcfg.cab to each system.

             

               This will be done as part of installer. Later while uninstalling we will delete the cab file. Our assumption is deleting this cab file will reset the settings in McAfee. Looks like that's not the case.

             

               Whats the right way to reset the setting?

             

            Regards,

            Senthil

            • 3. Re: Issue in cleaning McAfee exclusion list
              rmetzger

              senthilmanick wrote:

               

              Hi Ron,

                You are right, I am doing this

               

              1) Systems are NOT using ePO (systems are 'unmanaged' or 'stand alone').

              2) Used McAfee Installation Designer (MID) to create VSEcfg.cab with all customizations.

              3) Copied VSEcfg.cab to each system.

              . . .

              Later while uninstalling we will delete the cab file. Our assumption is deleting this cab file will reset the settings in McAfee. Looks like that's not the case.

               

                 Whats the right way to reset the setting?

               

              Regards,

              Senthil

              1) Open up the VirusScan Console

              2) Help

              3) Repair Installation

               

              Without VSEcfg.cab, the McAfee defaults are restored and all customizations removed.

              With VSEcfg.cab, the customizations defined by MID are restored, removing any customizations that occurred after the VSEcfg.cab was initially used. 'Repair Installation' reverts back and re-implements whatever was defined by VSEcfg.cab.

               

              Copying a newly created (via MID) VSEcfg.cab to the workstation essentially does a 'Repair Installation' with the new VSEcfg.cab settings. Just give it a few minutes to happen.

               

              This assumes that you can still get to the VirusScan Console. But, if you 'un-installed' VSE, the VSE Console will no longer be available. However, re-installing VSE will re-generate the needed files and over-write the old configuration with the new one.

               

              Does this make sense?

              Ron Metzger