What is the Scan Engine?
The Scan Engine is central to McAfee products that use the Scan Engine. The Scan Engine uses information contained in the DAT files to identify and act against viruses. To view FAQs about the regular DAT files, see KB55986 - FAQs for V2 DAT files, or KB82396 - FAQs for V3 DAT files.

The Scan Engine is updated frequently to implement new advances in antivirus technology and to provide the greatest level of protection against virus threats. The Scan Engine consists of a binary that contains the program logic to do the following:

• Scan files at particular points
• Process and pattern-match virus definitions with data it finds within scanned files
• Decrypt and run virus code in an emulated environment
• Apply heuristic techniques to recognize new viruses
• Remove infectious code from legitimate files

Where can I download the latest Scan Engine-only or Scan Engine and DAT SuperDAT file?
To download a DAT, Engine, XDAT, or Stinger file, go to https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html.

You might need to download these files if your automated update fails, or if you want to use an Extra.DAT on an infected system.
 
Where are the minimum specifications published?
The minimum specifications are published as part of the readme.txt shipped within the Scan Engine packages.

NOTE: The minimum specifications are only for the Scan Engine, and do not include any allowance for the managed product.

How can I verify the Scan Engine's Verisign certificate?
For steps to complete this task, and to learn more about the Scan Engine and its digital signature, see KB52425 - Information about the Anti-Malware Scan Engine and its digital signature.

Is it important to keep my Scan Engine and DAT files up to date?
Updating your DAT files regularly is essential to the security of your environment. Keeping your Scan Engine up to date is equally important. Architectural changes to the way the Scan Engine and DAT files work together make it critical for you to update your Scan Engine. An old Scan Engine does not detect some threats.

Back to contents

What products use the Scan Engine?
The following products use the Scan Engine and DAT files:

• AntiSpyware Enterprise
• Email and Web 
• Endpoint Protection for Mac
• Endpoint Security
• Security Appliance Software
• Security for Lotus Domino
• Security Service for Exchange
• Security for SharePoint
• SuperDAT Manager
• VirusScan Command Line Scanner
• VirusScan Enterprise
• VirusScan Enterprise for Linux
• VirusScan Enterprise for Offline Virtual Images
• VirusScan for Mac

Back to contents

When a new Scan Engine release occurs, how do I prevent the AutoUpdate of the Engine for my products to allow me to first test it on a limited number of systems?
Each product is handled differently. To learn how to prevent a product from automatically updating to the latest posted Scan Engine, see KB66741 - About the 6.x.xx Anti-Malware Scan Engine.

An update to the latest Scan Engine update has failed, leading to no virus detections. How do I roll back the Scan Engine to the previous supported version?
Each product is handled differently. For a list of articles that cover how to roll back the Scan Engine, see KB66741 - About the 6.x.xx Anti-Malware Scan Engine.

Why is the Anti-Malware Incremental Scan Engine update first available for manual download before being posted for products to AutoUpdate? When does End of Life (EOL) begin?
McAfee Labs first releases the Scan Engine updates for elective download, which allows you to download Scan Engine packages for manual installation. After this period, the Scan Engine is put on an AutoUpdate posting, which means that your McAfee product automatically updates to the new release. The old Scan Engine reaches EOL six months after elective downloads begin.

Back to contents