4 Replies Latest reply on Aug 26, 2014 1:49 PM by llamamecomoquieras

    VirusScan Enterprise AVDatDateSys registry key not modified

    luistorres19

      Good morning people

       

      I will appeal to your expertise and experience in order to clarify an issue related to VirusScan Enterprise 8.8.0.

       

      McAfee VirusScan Enterprise + AntiSpyware Enterprise 

      Version number: 8.8.0 (8.8.0.1247)

       

      McAfee Agent 

      Version number: 4.8.0.1500

       

      I administer this AV and it's deployed to many computers within my company. We also have a security agent that checks every 15 minutes if AV (DAT files) and WSUS patches are updated. But this Security agent since 2014/08/15 indicates that AV DB doesn't have the latest update.

      the security agent just read this three registry keys:

       

      Product Name   HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection\Product
      Product Version
      HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection\szProductVer
      AV Library DateHKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVEngine\AVDatDateSys (Hex)

       

      The AVDatDate has this value 24/08/2014, but the AVDatDateSys has this value in binary

      de 07 07 00 00 00 1f 00 00 00 00 00 00 00 00

      If I translate this to a date, I must convert Hex values to decimal

      Year: 07DE ---> 2014

      Month: 0007 --> 07

      Day: 001F ----> 31

       

      When the security agent reads this resgistry key, informs the problem.

       

      When i check in Agent, it shows

       

      DAT Version: 7540.0000

      DAT Creation Date: 8/24/2014

       

      So Why the software is not modifying this value? Something changes with version 8.8.0? Is there a problem with the software? This inconsistences are very strange.

       

      I hope I can solve this

       

      Regards

       

       

      Luis Torres