Loading...

Knowledge Center


How to manually roll back the Anti-Malware Scan Engine in Security for Exchange 8.x.x
Technical Articles ID:   KB74691
Last Modified:  4/24/2019
Rated:


Environment

McAfee Anti-Malware Scan Engine 6.x.xx (6xxx)
McAfee Security for Microsoft Exchange (MSME) 8.x

Summary

This article helps you if you have inadvertently updated MSME to one of the following, before fully testing it in your network:
  • The latest Anti-Malware Scan Engine
  • A beta or release candidate Anti-Malware Scan Engine

Solution

CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a REG file that is not confirmed to be a genuine registry import file.


This method rolls back the Scan Engine only for MSME. It does not roll back the Scan Engine for any other McAfee products installed on the Exchange Server. 

NOTE: To roll back to the previous Engine, both the previous 5x00.xxxx Engine folder and files must exist in the MSME folder structure. If the folder and files for the previous Engine have been removed, contact Technical Support (see the Related Information section).
 
To roll back the Scan Engine:
  1. Ensure that the previous Engine folder and files are present.
    1. Start Windows Explorer.
    2. Navigate to the following folder: <msme install folder>\bin\Engines (default is C\Program Files (x86)\McAfee\MSME\bin\Engines\) 
    3. Ensure that the 5x00.xxxx folder exists and contains files.
       
  2. Modify the registry to set the Engine version you would like MSME to use:
    1. Click Start, Run, type regedit and click OK.
    2. Browse to the following registry key:

      HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee\MSME\SystemState
       
    3. Double-click the EngineVersion registry value.
    4. Change the Value data field, and then click OK. For example, specify 5x00.xxxx.
    5. Close the registry editor.
       
  3. On the MSME home page, verify the version information to ensure that MSME is now using the older Scan Engine.

Example - Rolling back the 6000 Beta engine when it was inadvertently deployed to MSME

Ensure that the previous 5x00 Scan Engine folder and files exist in the MSME folder structure:
  1. Start Windows Explorer.
  2. Navigate to the following folder: <msme install folder>\bin\Engines (default is C\Program Files (x86)\McAfee\MSME\bin\Engines\) 
    There are at least two engine folders:
    5900.7501
    6000.xxxx (the beta or release candidate number of the release determines the full name of the engine folder)

  3. Ensure that the 5900.7501 folder contains the files:
    config.dat
    McScan32.dll (version 5.900.0.7501)
    SignLic.txt. 
Modify the registry to set the Engine version you would like MSME to use:
  1. Click Start, Run, type regedit, and click OK.
  2. Navigate to the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee\MSME\SystemState
     
  3. In the right pane, double-click EngineVersion. Value Data is 6000.xxxx if the build of 6000 beta or 6000 release candidate is deployed.
  4. Change the Value Data, type 5900.7501 so it reflects the name of the 5900 engine folder.
  5. Close the Registry editor.
  6. On the MSME home page, verify the version information to ensure that MSME is now using the 5900.7501 scan engine.

Rate this document

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.