Using two extra.dats in McAfee?

[Juergen Nieveler]

Does anybody know if it's possible to use more than 1 Extra.Dat in
McAfee, for example by copying two Datfiles into one?

 

[David H. Lipman]

Yes !

There can be only one EXTRA.DAT in the McAfee ENGINE directory.
Just concatenate the contents of two different files into one EXTRA.DAT file.

Example below:

EXTRA.DAT #1
--------------------
87 178 159 177 77 51 218 128 63 28 195 214 121 64 230 202
35 64 205 254 64 204 137 34 15 50 140 48 15 115 141 18
2 177 211 233 197 225 93 247 243 142 168 114 167 150 165 80
242 50 249 48 15 51 140 22 29 148 41 205 31 213 158 63
216 134 14 124 85 206 193 104 170 62 15 182 13 1 160 76
13 39 64 177 10 51 195 180
8424 256 12442 334 W32/Netsky.s@MM



EXTRA.DAT #2
-----------------------
232 178 154 177 9 179 218 128 63 28 195 214 121 64 230 202
35 64 163 214 96 95 172 214 117 86 13 177 157 51 114 181
161 55 141 179 141 51 85 183 13 51 210 179 242 55 15 177
12 51 40 177 229 223 114 178 109 150 143 66 254 204 137 49
15 50 141 22 15 208 122 76 12 83 114 183 143 49 140 179
168 49 122 83 242 50 237 76 9 177 143 178 13 150 143 66
231 204 140 211 242 55 15 177 12 51 40 177 240 187 114 178
109 150 143 42 137 150 139 188 169 150 40 95 197 150 143 155
31 71 40 182 238 228 71 123 136 64 107 177 13 20 68 164
252 192 89 71 233 215 101 87 233 215 105 83 233 215 105 87
135 185 16 87 233 218 79 199 235 49 178 178 196 35 125 83
253 215 105 83 223 212 105 97 236 192 95 65 157 215 249 114
16 204 138 33 238 204 121 127 254 206 71 32 233 195 105 95
209 239 100 70 255 212 64 71 233 213 108 110 233 238 128 49
8 51 232 237 1 51 153 253 10
30624 256 12442 334 W32/Netsky.s.eml!exe


Resultant EXTRA.DAT
------------------------
87 178 159 177 77 51 218 128 63 28 195 214 121 64 230 202
35 64 205 254 64 204 137 34 15 50 140 48 15 115 141 18
2 177 211 233 197 225 93 247 243 142 168 114 167 150 165 80
242 50 249 48 15 51 140 22 29 148 41 205 31 213 158 63
216 134 14 124 85 206 193 104 170 62 15 182 13 1 160 76
13 39 64 177 10 51 195 180
8424 256 12442 334 W32/Netsky.s@MM

232 178 154 177 9 179 218 128 63 28 195 214 121 64 230 202
35 64 163 214 96 95 172 214 117 86 13 177 157 51 114 181
161 55 141 179 141 51 85 183 13 51 210 179 242 55 15 177
12 51 40 177 229 223 114 178 109 150 143 66 254 204 137 49
15 50 141 22 15 208 122 76 12 83 114 183 143 49 140 179
168 49 122 83 242 50 237 76 9 177 143 178 13 150 143 66
231 204 140 211 242 55 15 177 12 51 40 177 240 187 114 178
109 150 143 42 137 150 139 188 169 150 40 95 197 150 143 155
31 71 40 182 238 228 71 123 136 64 107 177 13 20 68 164
252 192 89 71 233 215 101 87 233 215 105 83 233 215 105 87
135 185 16 87 233 218 79 199 235 49 178 178 196 35 125 83
253 215 105 83 223 212 105 97 236 192 95 65 157 215 249 114
16 204 138 33 238 204 121 127 254 206 71 32 233 195 105 95
209 239 100 70 255 212 64 71 233 213 108 110 233 238 128 49
8 51 232 237 1 51 153 253 10
30624 256 12442 334 W32/Netsky.s.eml!exe

~ ~ ~
Dave



| Does anybody know if it's possible to use more than 1 Extra.Dat in
| McAfee, for example by copying two Datfiles into one?
|
| --
| Juergen Nieveler / (e-mail address removed) / PGP supported!
| Never try to understand Einstein's Theory of Relativity.
| Relativity is like an erection, the more you think about it, the harder it
| gets.

 

[Juergen Nieveler]

Yes !

There can be only one EXTRA.DAT in the McAfee ENGINE directory.
Just concatenate the contents of two different files into one
EXTRA.DAT file.

Thanks!

The blank line between the two virus samples is important, I guess?

 

[David H. Lipman]

Yes !

Dave



|
| > Yes !
| >
| > There can be only one EXTRA.DAT in the McAfee ENGINE directory.
| > Just concatenate the contents of two different files into one
| > EXTRA.DAT file.
|
| Thanks!
|
| The blank line between the two virus samples is important, I guess?
|
| --
| Juergen Nieveler / (e-mail address removed) / PGP supported!
| Said the fly, "Let us flee." Said the flea: "Let us fly."