Loading...

Knowledge Center


Important information about the 5.x.00 Anti-Virus Scanning Engine
Technical Articles ID:  KB66741
Last Modified:  8/27/2015
Rated:


Environment

McAfee Anti-Virus Scanning Engine 5.8.00 (5800), 5.7.00 (5700)
Multiple McAfee products

Summary

This article contains information about releases and how to stop automatic Engine updates from the current Engine to the next Engine version. It also provides links to articles that help you roll back from the next Engine to the current Engine if required. For an explanation of the Engine and its function, see KB52425.

Intel Security first releases the Anti-Malware Engine updates for elective download. This allows you to download Engine packages for manual installation over a period of three months. After the three-month period, the Engine is put on an AutoUpdate posting. This means that your point product will automatically update to the new release. The old Engine reaches end of life six months after elective downloads begin.

The 5800 Anti-Malware Engine will succeed the current 5700 Engine and includes the following improvements:
Detection and Performance enhancements
  • Enhancements to Portable Document Format (PDF) format to improve exploit detection capabilities
  • Improved handling of Windows Executable format
  • Improved unpacking of .NET, Shockwave Flash, Visual Basic for Applications and generic unpacking improvements to detect more threats
  • Enhancements to live memory scanning in Windows for detecting and removing malicious processes, threads and files
  • Performance optimizations around initialization and scanning
Platform enhancements
  • New supported platforms: Windows 10, FreeBSD 10.x, Solaris 11 for SPARC
  • End of Life (EOL) platforms: IBM AIX 5.3, FreeBSD 7.x, Solaris 8 on SPARC and Linux Kernel 2.4
System requirements (disk space and memory)
  • At least 512 MB of free hard disk space
  • At least an additional 512 MB of free hard disk space reserved for temporary files
  • At least 512 MB of RAM for scanning operations (1024 MB recommended)
  • At least 1024 MB of RAM for updating operations

IMPORTANT:  VSE 8.7i endpoints must be using VSE 8.7i Patch 5 + Hotfix 1038699 or later to install the 5800 Anti-Malware Engine. The hotfix and Release notes are attached to this article (VSE87_P5_HF1038699.zip).
Release Schedule for the 5800 Engine
  • Release Candidate (RC) in Q3 2015
  • RTW (Elective download) in Q4 2015
  • RTW (Auto Update) in Q1 2016

    NOTE: Detailed dates will be provided in upcoming 5800 Engine announcements.
5800 Engine Beta Download
Available from the McAfee Enterprise Beta site: http://www.mcafee.com/us/beta/public-betas/engines/5800-anti-malware-engine.aspx

NOTE: Customers must register for the beta program on the Enterprise beta site to obtain the 5800 Engine beta package(s). 
 
Available 5800 Engine packages
  • Linux 32-bit and 64-bit ePO package
  • Mac OS X ePO package
  • Windows 32-bit and 64-bit ePO package

5700 Anti-Virus Scanning Engine (current Engine)
The Anti-Malware Engine 5700 is the current Engine and applies to all McAfee products that use the Anti-Malware Engine.
 
5700 Engine Download
You can download the 5700 Engine from the McAfee Security Updates page at http://www.mcafee.com/apps/downloads/security-updates/security-updates.aspx.

Available 5700 Packages
The following 5700 ePolicy Orchestrator (ePO) packages are available:
  • Windows
  • Linux
  • Mac OS X
NOTE: The 5700 Engine will not be provided as a SuperDAT executable package.
Detection Enhancements
  • Enhancements to Java class format scanning to improve exploit detection capabilities
  • Live memory scanning on Windows for detecting and removing malicious processes, threads, and files
  • Enhanced generic unpacking to detect more threats
  • Native unpacking for newer versions of ASPack, AutoIt, and MSI
Performance Enhancements
  • General performance optimizations, including initialization and scanning
  • Improvement in Extra.DAT load times
Platform Enhancements
  • New supported platforms:
    • AIX 7.1
    • FreeBSD 9.x
    • Linux 3.12 Kernel
    • Solaris 11 on Intel
  • End of Life platforms:
    • Windows 2000
    • FreeBSD 6.x
    • HP-UX on Itanium
    • Mac on PowerPC
System Requirements (disk space and memory)
  • At least 512 MB of free hard disk space
  • At least an additional 512 MB of free hard disk space reserved for temporary files
  • At least 512 MB of RAM for scanning operations (1024 MB recommended minimum)
  • At least 1024 MB of RAM for updating operations
Minimum OS Requirements
  • Win XP:
    Supported: WinXP SP3 32-bit, WinXP SP2 64-bit
    Unsupported: WinXP RTM/SP1 (32-bit and 64-bit), WinXP SP2 (32-bit)
     
  • Windows 2003:
    Supported: Windows 2003 SP2
    Unsupported: Windows 2003 RTM and Windows 2003 SP1
     
  • Windows Vista
  • Windows 8 and 7
  • Windows 2008 RTM and R2
  • Windows 2012 RTM and R2
  • Windows 10
Release Schedule for the 5700 Engine
  • Released to World (RTW) (Elective Download) - September 15, 2014
  • RTW (AutoUpdate) - January 20, 2015 

    IMPORTANT: VSE 8.7i endpoints must have VSE 8.7i Patch 5 + Hotfix 982564 to install the Anti-Malware Engine 5700. For details, see KB82746
 
The 5600 Anti-Virus Scanning Engine (EOL) 
The 5600 Scan Engine reached End of Life (EOL) on March 31, 2015. Intel Security recommends upgrading to VirusScan Command Line Scanner 6.0.5 with the 5700 Scan Engine to continue receiving support.
 
EOL on Microsoft Windows 2000
  • The End Of Support (EOS) and EOL date for the Anti-Virus Scanning Engine on Windows 2000 was December 31, 2014. For details, see KB76758.
  • If you are using security products on Windows 2000, Intel Security suggests you investigate solutions that use later releases of supported Microsoft operating systems.

Rolling back to an earlier version
To roll back the Engine for your point product to an earlier version, refer to the relevant article:
Point product Related article
GroupShield 7.0 for Domino KB60375
Security for Lotus Domino 7.5 KB66692
Security for Microsoft Exchange 8.x KB74691
Security for Microsoft Exchange 7.6 KB74202
Security for SharePoint 2.5 KB74201
VirusScan Enterprise 8.x KB58626
VirusScan Enterprise for Linux KB54769

Stopping automatic updates
To stop your point product from automatically upgrading to the latest posted Engine, refer to the relevant article:
Point product Related article
ePO 5.x KB77901
ePO 4.6 KB73864
GroupShield 7.0 for Domino KB60383
Security for Lotus Domino 7.5 KB66695
Security for Microsoft Exchange 8.x, 7.x KB78061
Security for SharePoint 2.5 KB74892
VirusScan Enterprise 8.x KB51159
VirusScan Enterprise for Linux KB54024

Attachment 1

VSE87_P5_HF1038699.zip
177K • < 1 minute @ 56k, < 1 minute @ broadband


Rate this document

Did this article resolve your issue?

Please provide any comments below

Affected Products


Scan Engine

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.