2 Replies Latest reply on Jul 24, 2015 1:26 AM by rickylee

    Fail in deploying extra.dat to client machine

    rickylee

      Hi

      I have downloaded the extra.dat from mcafee and try to deploy to client machine based on the kb67602 and kb50462.

      However, the extradat cannot be deployed.

      The normal DAT update is successful.

       

      The relevant version of products are listed here as well.

      ePO 5.1

      Agent 4.8.0.1500

      VSE 8.8

       

       

      I cannot find any relevant information so I just paste the agent log here.

       

      Agent Subsystem 7/17/2015 11:20:21 AM Info Agent communication session closed

      Agent Subsystem 7/17/2015 11:20:21 AM Info No package received from ePO Server

      Agent Subsystem 7/17/2015 11:20:20 AM Info Sending the next batch of 1 data channel items

      Agent Subsystem 7/17/2015 11:20:20 AM Info Agent is connecting to ePO server

      Agent Subsystem 7/17/2015 11:20:20 AM Info Agent communication session started

      Scheduler 7/17/2015 11:20:18 AM Info The task McAfee Agent >  Product Update is deleted (ID={72C88F1F-9261-4B85-98E0-DFAA60F3A636})

      Updater 7/17/2015 11:20:12 AM Info Update Finished

      Updater 7/17/2015 11:20:12 AM Info These updates will be applied if they are in the repository:  EXTRADAT1000.

      Updater 7/17/2015 11:20:11 AM Info Loading update configuration from: catalog.xml

      Updater 7/17/2015 11:20:11 AM Info Extracting catalog.z.

      Updater 7/17/2015 11:20:11 AM Info Verifying catalog.z.

      Updater 7/17/2015 11:20:10 AM Info Downloading catalog.z.

      Updater 7/17/2015 11:20:10 AM Info Initializing update...

      Updater 7/17/2015 11:20:09 AM Info Checking update packages from repository McAfeeHttp.

      Updater 7/17/2015 11:20:08 AM Info Update Finished

      Updater 7/17/2015 11:20:08 AM Info Error occurred while verifying C:\ProgramData\McAfee\Common Framework\Current\EXTRADAT1000\ExtraDAT\0000\PkgCatalog.z.

      Updater 7/17/2015 11:20:08 AM Info File extra.dat could not be verified. Downloading complete file again.

      Updater 7/17/2015 11:20:07 AM Info Downloading extra.dat.

      Updater 7/17/2015 11:20:06 AM Info Loading update configuration from: PkgCatalog.xml

      Updater 7/17/2015 11:20:06 AM Info Extracting PkgCatalog.z.

      Updater 7/17/2015 11:20:06 AM Info Verifying PkgCatalog.z.

      Updater 7/17/2015 11:20:06 AM Info Downloading PkgCatalog.z.

      Updater 7/17/2015 11:20:06 AM Info Starting ExtraDAT update.

      Updater 7/17/2015 11:20:06 AM Info Verifying extradat.mcs.

      Updater 7/17/2015 11:20:06 AM Info These updates will be applied if they are in the repository:  EXTRADAT1000.

      Updater 7/17/2015 11:20:05 AM Info Loading update configuration from: catalog.xml

      Updater 7/17/2015 11:20:05 AM Info Extracting catalog.z.

      Updater 7/17/2015 11:20:05 AM Info Verifying catalog.z.

      Updater 7/17/2015 11:20:05 AM Info Downloading catalog.z.

      Updater 7/17/2015 11:20:05 AM Info Initializing update...

      Updater 7/17/2015 11:20:04 AM Info Checking update packages from repository ePO_EPO51.

      Scheduler 7/17/2015 11:20:03 AM Info Scheduler: Invoking task [McAfee Agent >  Product Update]...

      Agent Subsystem 7/17/2015 11:19:51 AM Info Agent communication session closed

      Agent Subsystem 7/17/2015 11:19:51 AM Info No package received from ePO Server

      Agent Subsystem 7/17/2015 11:19:51 AM Info Sending the next batch of 1 data channel items

      Agent Subsystem 7/17/2015 11:19:51 AM Info Agent is connecting to ePO server

      Agent Subsystem 7/17/2015 11:19:51 AM Info Agent communication session started

      Scheduler 7/17/2015 11:19:48 AM Info Added a new task McAfee Agent >  Product Update to Scheduler's task list 

      Agent Subsystem 7/17/2015 11:19:40 AM Info Agent communication session closed

      Agent Subsystem 7/17/2015 11:19:40 AM Info No package received from ePO Server

      Agent Subsystem 7/17/2015 11:19:39 AM Info Sending the next batch of 1 data channel items

      Agent Subsystem 7/17/2015 11:19:39 AM Info Agent is connecting to ePO server

      Agent Subsystem 7/17/2015 11:19:39 AM Info Agent communication session started

      Agent Subsystem 7/17/2015 11:19:37 AM Info Agent communication session closed

      Agent Subsystem 7/17/2015 11:19:37 AM Info Package uploaded to ePO Server successfully

      Agent Subsystem 7/17/2015 11:19:36 AM Info Agent is connecting to ePO server

      Agent Subsystem 7/17/2015 11:19:36 AM Info Agent communication session started

      Agent Subsystem 7/17/2015 11:18:45 AM Info Next policy enforcement in 60 minutes

       

      Please advise how can I deploy the extradat in the infected machine.

      Thanks in advance

        • 1. Re: Fail in deploying extra.dat to client machine
          tomz2

          Hi rickylee,


          From the log snippet you've provided it appears the system attempted to download the extra.dat file and failed to verify it.


          I'd suggest validating a few things:


          1. The repository branch your system(s) are on in the McAfee Agent policy.


          2. What branch the extra.dat is checked in to


          3. If your system is communicating with a distributed repository, validate that replication is successful.


          If the extra.dat is in current, but your systems are set to pull from evaluation, the system won't download the file because it doesn't exist in that branch.


          From my experience, as long as the extra.dat is in Current, and the update task is set to pull the extra.dat then it should pull with no issues.


          What you can also try, is an Update Now from ePO. Locate your system in the system tree, highlight it and select Update Now from the actions menu. By doing an Update Now, it forces the system to check for updates for all packages. This would mean any hotfixes, patches, etc. in the master repository for any installed managed products.


          You may also need to remove and re import the extra.dat file into the repository as well. It's possible the file itself is damaged.


          If all else fails, I'd recommend opening a support case. Support can help troubleshoot and escalate if needed.

          • 2. Re: Fail in deploying extra.dat to client machine
            rickylee

            Thanks~

            However, i have no idea why the extra.dat cannot deploy.

            After digging some logs from the machine, the VSE cannot even get any updates from the ePO server. I believe there is something special in that VSE. (Other applications are fine, the policies can be updated and so forth)

            Finally, we used the McAfee removal tool to remove all the applications and install back again. And the extra.dat is installed after re-installing VSE....