Knowledge Center

FAQs for Anti-Malware Scan Engine 6.0.xx
Technical Articles ID:   KB78037
Last Modified:  4/5/2019


McAfee Anti-Malware Scan Engine (Scan Engine) 6.x.00 (6000), 6.0.10 (6010)


This article is a consolidated list of common questions and answers and is intended for users who are new to the product, but can be of use to all users.

NOTE: For information about the 6.0.xx Scan Engine, see KB66741

General Product information covering miscellaneous topics and troubleshooting.
Compatibility Interaction between other products, software, or hardware.
Installation and Upgrades Information about installing, upgrading, or rolling back.
Functionality Product features and functions.


What is the Scan Engine?
The Scan Engine is central to McAfee products that use the Scan Engine. The Scan Engine uses information contained in the DAT files to identify and take action against viruses. To view FAQs about the daily DAT files, see KB55986 (V2 DAT files) or KB82396 (V3 DAT files).

The Scan Engine is updated frequently to implement new advances in anti-virus technology and to provide the greatest level of protection against virus threats. The Scan Engine consists of a binary that contains the program logic to do the following:

  • Scan files at particular points
  • Process and pattern-match virus definitions with data it finds within scanned files
  • Decrypt and run virus code in an emulated environment
  • Apply heuristic techniques to recognize new viruses
  • Remove infectious code from legitimate files

Where can I download the latest Scan Engine-only or Scan Engine and DAT SuperDAT file?
To download a DAT, Engine, XDAT, or Stinger file, go to https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html.

You might need to download these files if your automated update fails, or if you want to use an Extra.DAT on an infected system.

Where are the minimum specifications published?
The minimum specifications are published as part of the readme.txt shipped within the Scan Engine packages.

NOTE: The minimum specifications are only for the Scan Engine, and do not include any allowance for the managed product.

How can I verify the Scan Engine's Verisign certificate?
For steps to complete this task, and to learn more about the Scan Engine and its digital signature, see KB52425.

Is it important to keep my Scan Engine and DAT files up to date?
Updating your DAT files daily is essential to the security of your environment. Keeping your Scan Engine up to date is equally important. Architectural changes to the way the Scan Engine and DAT files work together make it critical for you to update your Scan Engine. An old Scan Engine does not detect some threats.

Back to contents


What products use the Scan Engine?
The following products use the Scan Engine and DAT files:

  • AntiSpyware Enterprise
  • Email and Web 
  • Endpoint Protection for Mac
  • Security Appliance Software
  • Endpoint Security
  • Security for Lotus Domino
  • Security Service for Exchange
  • Security for SharePoint
  • SuperDAT Manager
  • VirusScan Command Line Scanner
  • VirusScan Enterprise
  • VirusScan Enterprise for Linux
  • VirusScan Enterprise for Offline Virtual Images
  • VirusScan for Mac

 Back to contents

Installation and Upgrades

When a new Scan Engine release occurs, how do I prevent the AutoUpdate of the Engine for my products to allow me to first test it on a limited number of systems?
Each product is handled differently. To learn how to prevent a product from automatically updating to the latest posted Scan Engine, see KB66741.

An update to the latest Scan Engine update has failed, leading to no virus detections. How do I roll back the Scan Engine to the previous supported version?
Each product is handled differently. For a list of articles that cover how to roll back the Scan Engine, see KB66741.

Why is the Anti-Malware Incremental Scan Engine updates first available for manual download before being posted for products to AutoUpdate and when does End of Life (EOL) begin?
McAfee Labs first releases the Scan Engine updates for elective download, which allows you to download Scan Engine packages for manual installation. After this period, the Scan Engine is put on an AutoUpdate posting, which means that your McAfee product automatically updates to the new release. The old Scan Engine reaches EOL six months after elective downloads begin.

Back to contents

Why does the Scan Engine require TCP/IP support?
The Scan Engine requires TCP/IP support to enable Global Threat Intelligence and other technologies.

How do I determine whether a hardware or software combination is a supported configuration, if the details of all components are not information I have?
If the device has a networking adapter supported by the operating system, the minimum component configuration has been met. The other hardware-related components must meet the minimum specifications published in the respective McAfee product documentation.

Can the Scan Engine scan ISO files?
Yes. ISO files can be scanned with Scan Engine 6000 and later. For details, see KB90975.

Back to contents

Rate this document

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.