6400 Anti-Malware Scan Engine (Current)
The 6400 Scan Engine includes the following improvements:

• Improved DMG extraction support to include the APFS filesystem and UDRW format
• Security enhancements by moving away from the vulnerable OpenSSL libraries
• Provision for decoding the b64decode from buffer
• Augmented driver-limits to enable Research author bigger and complex detection codes
• Ability to use Regular Expressions in drivers to supplement pattern matching algorithms
• Expanding the exhausted hit-type limits to target more malware families
• Supplement the contemporary XL4 code to add support for RC4 CryptoAPI decryption
• Code optimization and minor bug fixes

New supported platforms:

• Windows 10 21H2
• Windows 11
• Windows Server 2022
• macOS 12.0 Monterey

End of Life platforms:

• None

System requirements – disk space and memory:

• At least 512 MB of free hard disk space
• At least another 512 MB of free hard disk space reserved for temporary files
• At least 512 MB of RAM for scanning operations – 1024 MB recommended
• At least 1024 MB of RAM for updating operations

Release schedule for the 6400 Scan Engine
 

6400 Scan Engine Beta	Starting November 23, 2021
6400 Scan Engine (Elective Download) General Availability (GA) for corporate products	December 14, 2021
6400 Scan Engine (Auto-Update) GA for corporate products (except Endpoint Security)	January 25, 2022
6400 Scan Engine (Throttled Auto-Update) GA for Endpoint Security	Starting January 11, 2022 until January 25, 2022

IMPORTANT: These timelines are estimates and are subject to change.

6400 Scan Engine download for VirusScan Enterprise and other products that consume V2 or MED DAT virus definition updates:
You can download the 6400 Scan Engine (starting December 14, 2021) from the DAT downloads page. The following products use MED DATs: Endpoint Security for Linux 10.7.x and Endpoint Security for Mac 10.7.x. The following products use V2 DATs: Advanced Threat Defense, Endpoint Security for Linux before 10.7.0, Endpoint Security for Mac before 10.7.0, Management for Optimized Virtual Environments (MOVE), Security for Microsoft Exchange, Security for SharePoint (PortalShield), SuperDAT Manager, VirusScan Command-Line Scanner, VirusScan Enterprise, VirusScan Enterprise for Linux, VirusScan Enterprise for Storage, VirusScan for Mac, and Web Gateway.

6400 Scan Engine download for Endpoint Security products that consume V3 virus definition updates:
For important information about the 6400 Anti-Malware Scan Engine update for Endpoint Security, see: KB92669 - About the 6400 Anti-Malware Scan Engine update for Endpoint Security. The following products use V3 DATs: Endpoint Security and Endpoint Security Storage Protection.

6300 Anti-Malware Scan Engine (Previous, to be End of Life soon)
The 6300 Scan Engine included the following improvements:

• Enhanced threat landscape with added support for MPress (LZMAT) and DMG file-type support
• Improved coverage on OLE and Excel file-types
• Better handling of VBA and Jar files and wider coverage for UPX packed files
• Catered multiple research requirements to improve the detection effectiveness with better handling in content
• Several bug fixes, and performance and security improvements

6200 Anti-Malware Scan Engine (End of Life on December 31, 2021)
The 6200 Scan Engine included the following improvements:

• Enhanced threat landscape with added support for MSIL and AutoIT based malware
• Extended coverage for PDF and ISO file types
• Added provision to author better content with decoding support for ADC and LZFSE
• Introduced better handling capability for Linux and macOS threats
• Multiple features for better driver handling which improves the detection effectiveness
• Several bug fixes and performance improvements

6100 Anti-Malware Scan Engine (End of Life on June 10, 2021)
The 6100 Scan Engine included the following improvements:

• Enhanced threat landscape coverage with added support for 7Z, RAR5, and ISO archive file types
• Improved detection with added support for WinACE2, BZIP2, LZMA2, BCJ, and PPMD Codecs
• Better handling capability for non-PE-based malware with added Driver Ordering support
• Improved precision in detection with added Floating-point support
• Several bug fixes, security fixes, and performance improvements

6010 Anti-Malware Scan Engine (End of Life on November 28, 2020)
The 6010 Scan Engine included the following improvements:

• Future platform support, including case sensitivity support for Windows 10 May 2019 Update (version 1903)
• File scanning performance improvements for Windows
• Sustaining fixes for all platforms

6000 Scan Engine (End of Life on November 28, 2020)
The 6000 Scan Engine included the following improvements:

• Enhanced JavaScript engine, stabilization, and performance improvements. JavaScript processing capability was added in the 5900 Scan Engine.
• Augmented VBA Macro file handling to improve detection capabilities on malware hidden in VBA Macros.
• Added internal APIs for file, directory, process, and registry handling to enable safer DAT content authoring.
• Added support for 64-bit binary disassembly.
• Enhanced ELF Handler, to improve detection capabilities on 64-bit ELF binaries.
• Improved DAT initialization performance to tackle increasing DAT content.
• Miscellaneous fixes of defects and customer escalations.

5900 Anti-Malware Scan Engine (End of Life on April 30, 2019)
The 5900 Scan Engine included the following detection and performance improvements:

• Enhanced support of JavaScript to detect more threats
• Improved support for the Microsoft Office (OLE) file format
• Improved unpacking of Dotfuscator and MPRESS packed files
• Enhancements to DAT content to improve predictability of content processing