Ping DHL Re: Multi-AV - McAfee

[Jean]

Unable to update McAfee in Multi-AV.
"Data connection: Unknown error; Data transfer was aborted".

I remember many, many months ago you were posting a step-by-step instruction
as how to manually download the data (superdat) from McAfee's website and
then installing it to the Multi-AV tool.

Would you kindly please re-post this instruction, many thanks in advance.

 

[David H. Lipman]

From: "Jean" <[email protected]>

| Unable to update McAfee in Multi-AV.
| "Data connection: Unknown error; Data transfer was aborted".
|
| I remember many, many months ago you were posting a step-by-step instruction
| as how to manually download the data (superdat) from McAfee's website and
| then installing it to the Multi-AV tool.
|
| Would you kindly please re-post this instruction, many thanks in advance.

Jean:

It could a problem in the server. I have added a few differnt servers in the script;
McAfee.kix

Open McAfee.kix in Notepad. Go down approx 21 lines.
Find...
$Site="ftp.nai.speedera.net"
;$site="ftpeur.nai.com"
;$Site="ftp.mcafee.com"

Note that two of the lines are commented out with the semicolon ";"
Put a ";" in front of the line $Site="ftp.nai.speedera.net" so it becomes
;$Site="ftp.nai.speedera.net"

Now remove ";" from one of the other two lines and save the file then launch the Start Menu
again and re-try the McAfee module.

 

[Jean]

From: "Jean" <[email protected]>

| Unable to update McAfee in Multi-AV.
| "Data connection: Unknown error; Data transfer was aborted".
|
| I remember many, many months ago you were posting a step-by-step
instruction
| as how to manually download the data (superdat) from McAfee's website
and
| then installing it to the Multi-AV tool.
|
| Would you kindly please re-post this instruction, many thanks in
advance.

Jean:

It could a problem in the server. I have added a few differnt servers in
the script;
McAfee.kix

Open McAfee.kix in Notepad. Go down approx 21 lines.
Find...
$Site="ftp.nai.speedera.net"
;$site="ftpeur.nai.com"
;$Site="ftp.mcafee.com"

Note that two of the lines are commented out with the semicolon ";"
Put a ";" in front of the line $Site="ftp.nai.speedera.net" so it becomes
;$Site="ftp.nai.speedera.net"

Now remove ";" from one of the other two lines and save the file then
launch the Start Menu
again and re-try the McAfee module.

Thanks Dave.
1.) Implemented your instruction (partial print-out below)
"$Report"'
$CMDline=$CMDline1+$MalwareProcMode+$CMDline2
$drive=left($home,2)
;$Site="ftp.nai.speedera.net"
$site="ftpeur.nai.com"
$Site="ftp.mcafee.com"
$EXTRAsrc="c:\AV-CLS\extra.dat"
$pmfolder=readvalue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion","ProgramFilesDir")

2.) Rebooted, opened McAfee.kix and double checked if settings were saved
correctly.
3.) Launched the Start Menue and re-tryed the McAfee module, unfortunately I
am still unable to download the files.

(Start print-out of various dos screen displays)

--11:05:56-- ftp://ftp.mcafee.com/pub/antivirus/datfiles/4.x/update.ini
=> `update.ini'
Resolving ftp.mcafee.com... done.
Connecting to ftp.mcafee.com[216.143.70.11]:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/antivirus/datfiles/4.x ... done.
==> PASV ... done. ==> RETR update.ini ... done.

[ <=> ] 1,286 13.36K/s

11:06:15 (13.36 KB/s) - Data connection: Unknown error; Retrying.

--11:06:15-- ftp://ftp.mcafee.com/pub/antivirus/datfiles/4.x/update.ini
(try: 2) => `update.ini'
==> CWD not required.
==> SIZE update.ini ... done.
==> PASV ... couldn't connect to 216.143.70.11:1354: Bad file descriptor


--11:07:03-- ftp://ftp.mcafee.com/pub/antivirus/superdat/intel/sdat5216.exe
=> `sdat5216.exe.1'
Resolving ftp.mcafee.com... done.
Connecting to ftp.mcafee.com[216.143.70.11]:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/antivirus/superdat/intel ... done.
==> PASV ... done. ==> RETR sdat5216.exe ... done.

[ <=> ] 30,282 2.89K/s

11:07:42 (2.89 KB/s) - Data connection: Unknown error; .ontrol connection
closed
Retrying.

--11:07:57-- ftp://ftp.mcafee.com/pub/antivirus/superdat/intel/sdat5216.exe
(try: 2) => `sdat5216.exe.1'
Connecting to ftp.mcafee.com[216.143.70.11]:21... connected.
Logging in as anonymous ...


--11:10:51-- ftp://ftp.mcafee.com/pub/antivirus/superdat/intel/sdat5216.exe
=> `sdat5216.exe'
Resolving ftp.mcafee.com... done.
Connecting to ftp.mcafee.com[216.143.70.11]:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/antivirus/superdat/intel ... done.
==> PASV ... done. ==> RETR sdat5216.exe ... done.

[ <=> ] 2,884 5.30K/s

11:11:11 (5.30 KB/s) - Data connection: Unknown error; .ontrol connection
closed
Retrying.

--11:12:14-- ftp://ftp.mcafee.com/pub/antivirus/superdat/intel/sdat5216.exe
(try: 2) => `sdat5216.exe'


--11:14:40-- ftp://ftp.mcafee.com/pub/antivirus/superdat/intel/sdat5216.exe
=> `sdat5216.exe'
Resolving ftp.mcafee.com... done.
Connecting to ftp.mcafee.com[216.143.70.11]:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/antivirus/superdat/intel ... done.
==> PASV ... done. ==> RETR sdat5216.exe ... done.

[ <=> ] 2,884 138.78B/s

=> `sdat5216.exe'
Resolving ftp.mcafee.com... done.
Connecting to ftp.mcafee.com[216.143.70.11]:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/antivirus/superdat/intel ... done.
==> PASV ... done. ==> RETR sdat5216.exe ... done.

[ <=> ] 2,884 138.78B/s

11:15:28 (138.78 B/s) - Data connection: Unknown error; d.ntrol connection
close
Retrying.

--11:15:43-- ftp://ftp.mcafee.com/pub/antivirus/superdat/intel/sdat5216.exe
(try: 2) => `sdat5216.exe'
Connecting to ftp.mcafee.com[216.143.70.11]:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/antivirus/superdat/intel ... done.
==> SIZE sdat5216.exe ... done.
==> PASV ... done. ==> REST 2884 ... done.
==> RETR sdat5216.exe ... done.
Length: 31,631,884 [31,629,000 to go]

0% [ ] 11,536 919.74B/s ETA
9:32:59

(End of print out)

Note: The download process stopped by itself and a McAfee pop-up prompt
appeared asking if I wish to proceed with scanning.

 

[David H. Lipman]

From: "Jean" <[email protected]>

< snip >


| Note: The download process stopped by itself and a McAfee pop-up prompt
| appeared asking if I wish to proceed with scanning.

I am sorry you are having troables downloading teh McAfee SuperDAT.

Are you having troubles downloading from other sites ?

Another alternate method:

Download the EXE SuperDAT from here
http://www.mcafee.com/apps/downloads/security_updates/superdat.asp?region=us&segment=enterprise

Assuming the SuperDAT is; sdat5216.exe

Rename sdat5216.exe to setup.exe

Save setup.exe in; C:\AV-CLS\mcafee

Then start the Multi AV Scanning Tool again and choose the McAfee module.

 

[Jean]

From: "Jean" <[email protected]>

< snip >


| Note: The download process stopped by itself and a McAfee pop-up prompt
| appeared asking if I wish to proceed with scanning.

I am sorry you are having troables downloading teh McAfee SuperDAT.

Are you having troubles downloading from other sites ?

Another alternate method:

Download the EXE SuperDAT from here
http://www.mcafee.com/apps/downloads/security_updates/superdat.asp?region=us&segment=enterprise

Assuming the SuperDAT is; sdat5216.exe

Rename sdat5216.exe to setup.exe

Save setup.exe in; C:\AV-CLS\mcafee

Then start the Multi AV Scanning Tool again and choose the McAfee module.

Thanks again, David.

McAfee Worked like a charm

(partial print-out of dos screen)
McAfee VirusScan for Win32 v5.20.0
Copyright (c) 1992-2007 McAfee, Inc. All rights reserved.
(408) 988-3832 LICENSED COPY - Jun 5 2007

Scan engine v5.2.00 for Win32.
Virus data file v5217 created Jan 28 2008
Scanning for 368001 viruses, trojans and variants.

Scanning C: [WinXP]
C:\Program Files\UPHClean\uphclean.exe \Scanning C:\*.*
(end of print-out of dos screen)

Please note that I didn't reverse the changes made to McAfee.kix in Notepad.

Updating the other 3 modules is no problem.

I only recently re-installed my OS, 'hardened' it considerable and am
assuming that this may inhibit the function of the downloading process of
superDAT using the original procedure. I also recall using the McAfee
removal tool some time ago, this too may have been a causing factor.

Anyway, everything appears to be A1 OK.

As a thought, it may be beneficial for others adding the alternate
downloading procedure to http://pcdid.com/Multi_AV.htm. It would complement
and complete the already detailed instructions.

David, my real-time resident AV is Kaspersky Anti-Virus 6.0.2.621.
Would you regard it as superfluous scanning with the Kasperksy module in
Multi-AV as well?

 

[David H. Lipman]

From: "Jean" <[email protected]>


| Thanks again, David.

| McAfee Worked like a charm

| (partial print-out of dos screen)
| McAfee VirusScan for Win32 v5.20.0
| Copyright (c) 1992-2007 McAfee, Inc. All rights reserved.
| (408) 988-3832 LICENSED COPY - Jun 5 2007

| Scan engine v5.2.00 for Win32.
| Virus data file v5217 created Jan 28 2008
| Scanning for 368001 viruses, trojans and variants.

| Scanning C: [WinXP]
| C:\Program Files\UPHClean\uphclean.exe \Scanning C:\*.*
| (end of print-out of dos screen)

| Please note that I didn't reverse the changes made to McAfee.kix in Notepad.

| Updating the other 3 modules is no problem.

| I only recently re-installed my OS, 'hardened' it considerable and am
| assuming that this may inhibit the function of the downloading process of
| superDAT using the original procedure. I also recall using the McAfee
| removal tool some time ago, this too may have been a causing factor.

| Anyway, everything appears to be A1 OK.

| As a thought, it may be beneficial for others adding the alternate
| downloading procedure to http://pcdid.com/Multi_AV.htm. It would complement
| and complete the already detailed instructions.

| David, my real-time resident AV is Kaspersky Anti-Virus 6.0.2.621.
| Would you regard it as superfluous scanning with the Kasperksy module in
| Multi-AV as well?


Thanx for the feedback Jean.

The personna BigBruva owns http://pcdid.com/Multi_AV.htm and I haven't been able to
communicate with him for well over a year.

What I will do is update the PDF Help File with this information. Maybe what I should do
is script this fall-back signature download as well.

If you have Kaspersky resident, then running the Kaspersky module is supurfluos in your
case.

 

[David H. Lipman]

From: "Jean" <[email protected]>

Update:

The next release (v6.00) will provide a choice between using FTP and HTTP to download the
McAfee SuperDAT.