Important information about the 6.0.xx Anti-Malware Scan Engine

Technical Articles ID: KB66741
Last Modified: 8/16/2019

Environment

McAfee Anti-Malware Scan Engine 6.0.00 (6000), 6.0.10 (6010)
McAfee VirusScan Command Line Scanner 6.1.2, 6.1.3
Multiple McAfee products

Summary

This article contains information about releases and how to stop automatic Scan Engine updates from the current Scan Engine to the next Scan Engine version. It also provides links to articles that help you roll back from the next Scan Engine to the current Scan Engine, if needed. For an explanation of the Scan Engine and its function, see KB52425.

6010 Anti-Malware Scan Engine (Current)
The 6010 Scan Engine includes the following improvements:

Future platform support, including case sensitivity support for Windows 10 May 2019 Update (version 1903)
File scanning performance improvements for Windows
Sustaining fixes for all platforms

Release schedule for the 6010 Scan Engine and VirusScan Command Line Scanner 6.1.3

6010 Scan Engine Beta	Starting April 9, 2019
VirusScan Command Line Scanner 6.1.3 Beta	Starting April 9, 2019
6010 Scan Engine (Elective Download) General Availability (GA) for corporate products (except Endpoint Security) and VirusScan Command Line 6.1.3 products GA	May 16, 2019
6010 Scan Engine (Elective Download) GA for Endpoint Security	May 15, 2019
6010 Scan Engine (AutoUpdate) GA for corporate products (except Endpoint Security)	No AutoUpdate is planned
6010 Scan Engine (Throttled AutoUpdate) GA for Endpoint Security	Starting June 25, 2019, and completion on July 9, 2019

IMPORTANT: These timelines are estimates and are subject to change.

6010 Scan Engine download for VirusScan Enterprise and other related products that consume V2 virus definition updates:
You can download the 6010 Scan Engine from the Security Updates page at https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html.

6010 Scan Engine download for Endpoint Security and other related products that consume V3 virus definition updates:
For important information about the 6010 Anti-Malware Scan Engine update for Endpoint Security, see KB91437.

6000 Scan Engine (Previous)
The 6000 Scan Engine included the following improvements:

Enhanced JavaScript engine, stabilization, and performance improvements. JavaScript processing capability was added in the 5900 Scan Engine.
Augmented VBA Macro file handling to improve detection capabilities on malware hidden in VBA Macros.
Added internal APIs for file, directory, process, and registry handling to enable safer DAT content authoring.
Added support for 64-bit binary disassembly.
Enhanced ELF Handler, to improve detection capabilities on 64-bit ELF binaries.
Improved DAT initialization performance to tackle increasing DAT content.
Miscellaneous fixes of defects and customer escalations.

New supported platforms:

64-bit macOS support
Oracle Solaris 11.2 and 11.3
Linux OS running Kernel versions 4.x
IBM AIX 7.2

End of Life platforms:

Windows XP
Windows Server 2003

System requirements – disk space and memory:

At least 512 MB of free hard disk space
At least another 512 MB of free hard disk space reserved for temporary files
At least 512 MB of RAM for scanning operations – 1024 MB recommended
At least 1024 MB of RAM for updating operations

Available 6000 Scan Engine packages:

Linux 32-bit and 64-bit ePolicy Orchestrator (ePO) package
macOS ePO package
Windows 32-bit and 64-bit ePO package

6000 Scan Engine download for VirusScan Enterprise and other related products that consume V2 virus definition updates:
You can download the 6000 Scan Engine from the Security Updates page at https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html.

6000 Scan Engine download for Endpoint Security and other related products that consume V3 virus definition updates:
You can download the 6000 Scan Engine bundled in the AMCore package from http://downloadcenter.mcafee.com/products/mcafee-avert/dats.
For important information about the 6000 Anti-Malware Scan Engine update for Endpoint Security, see KB88809.

Rolling back to an earlier version for products consuming V2 DATs
To roll back the Scan Engine for your managed product to an earlier version, see the relevant article:

Managed product	Related article
Security for Lotus Domino 7.5	KB66692
Security for Microsoft Exchange 8.x	KB74691
VirusScan Enterprise 8.x	KB58626
VirusScan Enterprise for Linux	KB54769

Stopping automatic updates for products consuming V2 DATs
To stop your managed product from automatically upgrading to the latest posted Scan Engine, see the relevant article:

Managed product	Related article
ePO 5.x	KB77901
Security for Lotus Domino 7.5	KB66695
Security for Microsoft Exchange 8.x	KB78061
VirusScan Enterprise 8.x	KB51159
VirusScan Enterprise for Linux	KB54024

5900 Anti-Malware Scan Engine (End of Life on April 30, 2019)
The 5900 Scan Engine included the following detection and performance improvements:

Enhanced support of JavaScript to detect more threats
Improved support for the Microsoft Office (OLE) file format
Improved unpacking of Dotfuscator and MPRESS packed files
Enhancements to DAT content to improve predictability of content processing

New supported platforms:

Windows 10 Anniversary Update
Windows Server 2016

End of Life platforms: Hewlett-Packard HP-UX 11iv, 11iv1, and 11iv2

System requirements – disk space and memory:

At least 512 MB of free hard disk space
At least another 512 MB of free hard disk space reserved for temporary files
At least 512 MB of RAM for scanning operations (1024 MB recommended)
At least 1024 MB of RAM for updating operations

Available 5900 Scan Engine packages:

Linux 32-bit and 64-bit ePO package
macOS ePO package
Windows 32-bit and 64-bit ePO package

Related Information

To review the FAQs for Anti-Malware Scan Engine, see KB78037.

For product lifecycle details, see the McAfee Product and Technology Support Lifecycle page at: http://www.mcafee.com/us/support/support-eol.aspx.

For End of Life (EOL) policy details, see the Corporate Products EOL policy at: https://www.mcafee.com/enterprise/en-us/assets/misc/support-policy-product-support-eol.pdf.

Definitions:

EOL period—The time frame that runs from the day McAfee announces product discontinuation, until the last date that McAfee formally supports the product. In general, after the EOL period is announced, no enhancements are made.
EOL date—The last day that the product is supported, according to the terms of the McAfee standard support offering.

Affected Products

Scan Engine
Upgrade/Migrate
VirusScan Command Line Scanner 6.1.x

Languages:

This article is available in the following languages:

German
English United States
Spanish Spain
French
Italian
Japanese
Korean
Dutch
Portuguese Brasileiro
Chinese Simplified
Chinese Traditional

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Environment

Summary

Related Information

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Knowledge Center

Environment

Summary

Related Information

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title