Loading...

Knowledge Center


Important information about the 5.x.00 Anti-Malware Scan Engine
Technical Articles ID:   KB66741
Last Modified:  2/17/2017
Rated:


Environment

McAfee Anti-Malware Scan Engine 5.9.00 (5900), 5.8.00 (5800)
McAfee VirusScan Command Line Scanner 6.1.0
Multiple McAfee products

Summary

This article contains information about releases and how to stop automatic Scan Engine updates from the current Scan Engine to the next Scan Engine version. It also provides links to articles that help you roll back from the next Scan Engine to the current Scan Engine if required. For an explanation of the Scan Engine and its function, see KB52425.

Intel Security first releases the Scan Engine updates for elective download. This allows you to download Scan Engine packages for manual installation over a period of three months. After the three-month period, the Scan Engine is put on an AutoUpdate posting. This means that your products will automatically update to the new release. The old Scan Engine reaches End of Life six months after elective downloads begin.

5800 Anti-Malware Scan Engine (current Scan Engine)
The 5800 Scan Engine includes the following improvements:
Detection and performance enhancements
  • Enhancements to Portable Document Format (PDF) format to improve exploit detection capabilities
  • Improved handling of Windows Executable format
  • Improved unpacking of .NET, Shockwave Flash, Visual Basic for Applications, and generic unpacking improvements to detect more threats
  • Enhancements to live memory scanning in Windows for detecting and removing malicious processes, threads, and files
  • Performance optimizations around initialization and scanning
Platform enhancements
  • New supported platforms: Windows 10, FreeBSD 10.x, and Solaris 11 for SPARC

    NOTE: Windows 10 support is dependent on the product using the Scan Engine. For example, both the 5700 and 5800 Scan Engines support Windows 10 with VirusScan Enterprise 8.8, provided Patch 6 is also installed.

  • End of Life platforms: IBM AIX 5.3, FreeBSD 7.x, Solaris 8 on SPARC, and Linux Kernel 2.4
System requirements (disk space and memory)
  • At least 512 MB of free hard disk space
  • At least an additional 512 MB of free hard disk space reserved for temporary files
  • At least 512 MB of RAM for scanning operations (1024 MB recommended)
  • At least 1024 MB of RAM for updating operations
Release schedule for the 5800 Engine
  • RTW (elective download) September 3, 2015
  • Auto-update January 20, 2016
 Available 5800 Scan Engine packages
  • Linux 32-bit and 64-bit ePolicy Orchestrator (ePO) package
  • Mac OS X ePO package
  • Windows 32-bit and 64-bit ePO package
5800 Scan Engine Download
You can download the 5800 Scan Engine from the Security Updates page at http://www.mcafee.com/apps/downloads/security-updates/security-updates.aspx.


5900 Anti-Malware Scan Engine and VirusScan Command Line Scanner 6.1.0 (Not Yet Released)
The release schedule for the 5900 Anti-Malware Scan Engine and VirusScan Command Line Scanner 6.1.0  is currently as follows.

Release schedule for the 5900 Anti-Malware Scan Engine and VirusScan Command Line Scanner 6.1.0
5900 Scan Engine Beta 3 January 17, 2017
VirusScan Command Line Scanner 6.1.0 Beta 3 January 21, 2017
Release Candidate (RC) packages of the 5900 Scan Engine and VirusScan Command Line Scanner 6.1.0 products February 15, 2017
5900 Scan Engine (Elective Download) General Availability (GA) for corporate products (except Endpoint Security) and VirusScan Command Line 6.1.0 products GA Late February 2017*
5900 Scan Engine (Elective Download) GA for Endpoint Security Early March 2017*
5900 Scan Engine (AutoUpdate) GA for corporate products (except Endpoint Security) Late April 2017*
5900 Scan Engine (Throttled AutoUpdate) GA for Endpoint Security Early May 2017*

IMPORTANT: *These dates are estimated and may be subject to change.

Where can I obtain the Beta/RC packages?  
They are/will be available from the Engines area of the McAfee Enterprise Beta site:
http://www.mcafee.com/us/beta/public-betas/engines/5900-anti-malware-engine.aspx


Rolling back to an earlier version
To roll back the Scan Engine for your point product to an earlier version, refer to the relevant article:
Point product Related article
Endpoint Security 10.x KB86704 1
Security for Lotus Domino 7.5 KB66692
Security for Microsoft Exchange 8.x KB74691
VirusScan Enterprise 8.x KB58626
VirusScan Enterprise for Linux KB54769

Stopping automatic updates
To stop your point product from automatically upgrading to the latest posted Scan Engine, refer to the relevant article:
Point product Related article
Endpoint Security 10.x KB86704 1
ePO 5.x KB77901
Security for Lotus Domino 7.5 KB66695
Security for Microsoft Exchange 8.x KB78061
VirusScan Enterprise 8.x KB51159
VirusScan Enterprise for Linux KB54024

1  KB86704 is the FAQs article for Endpoint Security 10.x, and addresses the question "Why does Endpoint Security update the engine version automatically?"

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.