Loading...

Knowledge Center


How to apply an ExtraDAT to McAfee Security for Microsoft Exchange 8.x
Technical Articles ID:   KB76201
Last Modified:  1/4/2016

Environment

McAfee Security for Microsoft Exchange 8.5, 8.0

Microsoft Exchange 2013, 2010, 2007

Summary

This article describes how to apply an ExtraDAT to McAfee Security for Microsoft Exchange (MSME) 8.x.

Solution

CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a REG file that is not confirmed to be a genuine registry import file.


MSME stores its DAT files in specific sub-directories under the installation folder. The default location is:
 
\Program Files (x86)\McAfee\MSME\bin\DATs\

NOTE: The current dat file directory can be identified by its name or modification/creation date. It is usually the most recently created folder. This can also be verified in the registry HKLM\Software\Wow6432Node\McAfee\MSME\Systemstate - DatVersion key.
             
 
To manually apply the ExtraDAT, use the following procedure:
  1. Create a new folder in \Program Files (x86)\McAfee\MSME\bin\DATs.
  2. Name the new folder -1. 

    For example, if the current dat files folder is 8033.0000 then the new folder should be named 8033.0000-1.

             
    NOTE: Do not delete the folder. You may want to revert to the current version at another time.

  3. Copy the extra.dat file to the -1 folder.

  4. Copy the three existing dat files, avvclean.dat, avvnames.dat, and avvscan.dat, from <current dat file directory> to <current dat file directory>-1

  5. Access the registry HKLM\Software\Wow6432Node\McAfee\MSME\Systemstate - DatVersion key.
  6. Change Value Data in this key from name to name -1.

    Example: If the current dat files folder is 8033.0000 and now you want to use the new folder with the extra.dat, then the detail in DatVersion should be set to 8033.0000-1.

    IMPORTANT:

    • If you apply the ExtraDAT through ePolicy Orchestrator (ePO), ensure that the latest ePO versions and updates are installed.
    • Apply only extra.dat files supplied by McAfee Labs. 
    • Do not manually change the contents in the extra.dat file. This could result in scan failures and mail flow issues. 

If you encounter a problem after manually applying the extra.dat, you can reset MSME to use the previous dat set by doing the following:
  1. Access registry key HKLM\Software\Wow6432Node\McAfee\MSME\Systemstate - DatVersion.
  2. Change the Value Dat in this key from -1 name to name.

            Example: If dat files plus the extra.dat are in 8033.0000-1 and you now want to revert to the previous dat version, then set the detail in the DatVersion key to 8033.0000.

Workaround

Wait for the daily DAT file to be downloaded to the server running MSME. This will typically be available within one day.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.