This article is a consolidated list of common questions and answers and is intended for users who are new to the product. It can be of use to all users.
NOTE: For information about the 6.x.xx Scan Engine, see
KB66741 - About the 6.x.xx Anti-Malware Scan Engine.
Contents
What is the Scan Engine?
The Scan Engine is central to McAfee products that use the Scan Engine. The Scan Engine uses information contained in the DAT files to identify and act against viruses. To view FAQs about the regular DAT files, see KB55986 - FAQs for V2 DAT files, or KB82396 - FAQs for V3 DAT files.
The Scan Engine is updated frequently to implement new advances in antivirus technology and to provide the greatest level of protection against virus threats. The Scan Engine consists of a binary that contains the program logic to do the following:
- Scan files at particular points
- Process and pattern-match virus definitions with data it finds within scanned files
- Decrypt and run virus code in an emulated environment
- Apply heuristic techniques to recognize new viruses
- Remove infectious code from legitimate files
Where can I download the latest Scan Engine-only or Scan Engine and DAT SuperDAT file?
To download a DAT, Engine, XDAT, or Stinger file, go to https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html.
You might need to download these files if your automated update fails, or if you want to use an Extra.DAT on an infected system.
Where are the minimum specifications published?
The minimum specifications are published as part of the readme.txt shipped within the Scan Engine packages.
NOTE: The minimum specifications are only for the Scan Engine, and do not include any allowance for the managed product.
How can I verify the Scan Engine's Verisign certificate?
For steps to complete this task, and to learn more about the Scan Engine and its digital signature, see KB52425 - Information about the Anti-Malware Scan Engine and its digital signature.
Is it important to keep my Scan Engine and DAT files up to date?
Updating your DAT files regularly is essential to the security of your environment. Keeping your Scan Engine up to date is equally important. Architectural changes to the way the Scan Engine and DAT files work together make it critical for you to update your Scan Engine. An old Scan Engine does not detect some threats.
Back to contents
What products use the Scan Engine?
The following products use the Scan Engine and DAT files:
- AntiSpyware Enterprise
- Email and Web
- Endpoint Protection for Mac
- Endpoint Security
- Security Appliance Software
- Security for Lotus Domino
- Security Service for Exchange
- Security for SharePoint
- SuperDAT Manager
- VirusScan Command Line Scanner
- VirusScan Enterprise
- VirusScan Enterprise for Linux
- VirusScan Enterprise for Offline Virtual Images
- VirusScan for Mac
How do I determine whether a hardware or software combination is a supported configuration, if I do not have the details of all components?
If the device has a networking adapter that the operating system supports, the minimum component configuration has been met. The other hardware-related components must meet the minimum specifications published in the respective McAfee product documentation.
Back to contents
Installation and Upgrades
When a new Scan Engine release occurs, how do I prevent the AutoUpdate of the Engine for my products to allow me to first test it on a limited number of systems?
Each product is handled differently. To learn how to prevent a product from automatically updating to the latest posted Scan Engine, see KB66741 - About the 6.x.xx Anti-Malware Scan Engine.
An update to the latest Scan Engine update has failed, leading to no virus detections. How do I roll back the Scan Engine to the previous supported version?
Each product is handled differently. For a list of articles that cover how to roll back the Scan Engine, see KB66741 - About the 6.x.xx Anti-Malware Scan Engine.
Why is the Anti-Malware Incremental Scan Engine update first available for manual download before being posted for products to AutoUpdate? When does End of Life (EOL) begin?
McAfee Labs first releases the Scan Engine updates for elective download, which allows you to download Scan Engine packages for manual installation. After this period, the Scan Engine is put on an AutoUpdate posting, which means that your McAfee product automatically updates to the new release. The old Scan Engine reaches EOL six months after elective downloads begin.
Back to contents
Why does the Scan Engine require TCP/IP support?
The Scan Engine requires TCP/IP support to enable Global Threat Intelligence and other technologies.
Can the Scan Engine scan ISO files?
Yes. ISO files can be fully scanned using Scan Engine 6100 and later. ISO files scanning had a limitation with Scan Engine 6010 and earlier. For details, see
KB92712 - ISO and 7Z archive file scanning with the Anti-Malware Scan Engine 6.1.xx, and
KB90975 - ISO file scanning with the Anti-Malware Scan Engine 6.0.00/6.0.10.
Back to contents