<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:24.0pt;
font-family:"Times New Roman","serif";
font-weight:bold;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:13.5pt;
font-family:"Times New Roman","serif";
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Times New Roman","serif";
font-weight:bold;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Times New Roman","serif";
font-weight:bold;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:14120832;
mso-list-template-ids:1608790182;}
@list l1
{mso-list-id:70006280;
mso-list-template-ids:978354888;}
@list l2
{mso-list-id:112485123;
mso-list-template-ids:-1870214588;}
@list l3
{mso-list-id:146627895;
mso-list-template-ids:-1074737474;}
@list l4
{mso-list-id:503781036;
mso-list-template-ids:-183580702;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5
{mso-list-id:577712372;
mso-list-template-ids:1660590236;}
@list l6
{mso-list-id:681199842;
mso-list-template-ids:-1378456446;}
@list l7
{mso-list-id:1433237691;
mso-list-template-ids:-823881174;}
@list l8
{mso-list-id:1891762596;
mso-list-template-ids:501546512;}
@list l8:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9
{mso-list-id:2100255136;
mso-list-template-ids:835984074;}
@list l9:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l10
{mso-list-id:2118254978;
mso-list-template-ids:621042978;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Good afternoon,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Following an announcement by McAfee that one of its regularly
scheduled virus definition (DAT files) update caused shutdown and bluescreen
problems, we will be installing a McAfee agent on all Cullen College of
Engineering supported Windows systems to help maintain control of virus
definition updates and McAfee application updates to help prevent spread of future
bad DAT files and to make sure all machines will have up-to-date versions of
the antivirus application. The new agent will cause the McAfee icon to look
a little bit different (bottom right corner). This agent should assist us
in scheduling the virus definition update and deployment. There is no
action on your part to remedy this problem, but we will be remotely (and
discretely) installing the McAfee agent on all college supported Windows
computers. <o:p></o:p></p>
<p class=MsoNormal>If you experience unusual symptoms that render your computer
unusable, please let me know immediately so we can get your system back in
service as soon as possible.<o:p></o:p></p>
<p class=MsoNormal>The problem was widespread on this campus, but so far, we’ve
only seen a few instances of it in our college. Instead of providing a
link, I will post the contents of the announcement from the McAfee website
below. Thank you.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<h1>False positive detection of w32/wecorl.a in 5958 DAT<o:p></o:p></h1>
<p class=MsoNormal><o:p> </o:p></p>
<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0>
<tr>
<td style='padding:1.5pt 1.5pt 1.5pt 1.5pt'>
<p class=MsoNormal align=right style='text-align:right'><strong><span
style='font-family:"Calibri","sans-serif"'>Corporate KnowledgeBase ID:</span></strong><span
style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:1.5pt 1.5pt 1.5pt 1.5pt'>
<p class=MsoNormal> <span style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:1.5pt 1.5pt 1.5pt 1.5pt'>
<p class=MsoNormal>KB68780<span style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='padding:1.5pt 1.5pt 1.5pt 1.5pt'>
<p class=MsoNormal align=right style='text-align:right'><strong><span
style='font-family:"Calibri","sans-serif"'>Published:</span></strong><span
style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:1.5pt 1.5pt 1.5pt 1.5pt'>
<p class=MsoNormal> <span style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:1.5pt 1.5pt 1.5pt 1.5pt'>
<p class=MsoNormal>April 21, 2010<span style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
</tr>
</table>
<p class=MsoNormal> <o:p></o:p></p>
<h3>Environment <o:p></o:p></h3>
<p>For details of all supported operating systems, see KB51109<o:p></o:p></p>
<h3>Summary <o:p></o:p></h3>
<p class=MsoNormal>McAfee is aware of a <b>w32/wecorl.a</b> false positive with
the 5958 DAT file that was released on April 21, 2010.<o:p></o:p></p>
<h3>Problem <o:p></o:p></h3>
<p class=MsoNormal>Blue screen or DCOM error, followed by shutdown
messages after updating to the 5958 DAT on April 21, 2010.<o:p></o:p></p>
<h3>Solution <o:p></o:p></h3>
<p>The issue is resolved in the 5959 DAT file release (April 21, 2010), which
is available from the McAfee Security Updates page at:<br>
<br>
<a
href="http://www.mcafee.com/apps/downloads/security_updates/dat.asp?region=us&segment=enterprise">http://www.mcafee.com/apps/downloads/security_updates/dat.asp?region=us&segment=enterprise</a>
<br>
<br>
<b><span style='color:maroon'>NOTE:</span></b> Posting of the 5959 DAT file is
currently in progress. It may take several hours for the new DAT file to replicate
out to all McAfee download servers. <o:p></o:p></p>
<p> <o:p></o:p></p>
<p><b><span style='color:red'>IMPORTANT:</span></b> If you are already
affected by this issue, you must still either replace or restore <b>svchost.exe</b>.
See <b>Workaround 2 </b>below. McAfee is continuing to work on an
automated solution to fully resolve the issue for affected customers.<br>
<br>
<br>
Please watch for updates on this issue, which will be sent on a timely basis
through Support Notification Service (SNS) and Platinum Proactive
notifications.<br>
<br>
To subscribe to SNS, visit <a
href="http://my.mcafee.com/content/SNS_Subscription_Center">http://my.mcafee.com/content/SNS_Subscription_Center</a>.<br>
<br>
This article will be updated as additional information becomes available.<br>
<br>
<o:p></o:p></p>
<h3>Workaround 1 <o:p></o:p></h3>
<p class=MsoNormal>McAfee has developed an EXTRA.DAT to <b>suppress </b>this
detection. The file is attached to this article. This EXTRA.DAT does not fix
the issue, it only suppresses the detection.<br>
<br>
Apply the EXTRA.DAT to all potentially affected systems as soon as possible.<br>
<br>
For systems that have already encountered this issue, start the computer in
Safe Mode and apply the EXTRA.DAT. After applying the EXTRA.DAT, restore the
affected files from Quarantine.<br>
<o:p></o:p></p>
<p><strong><span style='color:red'>IMPORTANT</span></strong><span
style='color:red'>:</span><span style='color:black'> For VirusScan
Enterprise 8.5i and later, an Access Protection feature must
be temporarily disabled before proceeding:</span><o:p></o:p></p>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'>Click <b>Start</b>, <b>Programs</b>, <b>McAfee</b><span
style='color:black'>, <b>VirusScan Console</b>.</span> <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'>Right-click <b>Access Protection</b> and select <b>Disable</b>.
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><span style='color:black'>Apply the <b>EXTRA.DAT</b>
as described below.</span> <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'>Right-click <b>Access Protection</b> and select <b>Enable</b>.
<o:p></o:p></li>
</ol>
<p> <o:p></o:p></p>
<p><b>To apply the EXTRA.DAT locally: </b><o:p></o:p></p>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l7 level1 lfo2'>Download the <b>EXTRA.ZIP </b>file attached to this
article and extract the <b>EXTRA.DAT </b>file. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l7 level1 lfo2'>Click <strong><span style='font-family:"Calibri","sans-serif"'>Start</span></strong>,
<strong><span style='font-family:"Calibri","sans-serif"'>Run</span></strong>,
type <strong><span style='font-family:"Calibri","sans-serif"'>services.msc</span></strong>
and click <strong><span style='font-family:"Calibri","sans-serif"'>OK</span></strong>.
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l7 level1 lfo2'>Right-click the <strong><span style='font-family:
"Calibri","sans-serif"'>McAfee McShield</span></strong> service and select
<strong><span style='font-family:"Calibri","sans-serif"'>Stop</span></strong>.
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l7 level1 lfo2'>Copy the <b>EXTRA<strong><span style='font-family:
"Calibri","sans-serif"'>.DAT</span></strong></b> file to the following
location:<br>
<br>
<strong><span style='font-family:"Calibri","sans-serif"'><installation
drive>\Program Files\Common Files\McAfee\Engine</span></strong> <br>
<br>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l7 level1 lfo2'>In the Services window, right-click <strong><span
style='font-family:"Calibri","sans-serif"'>McAfee McShield</span></strong>
and select <strong><span style='font-family:"Calibri","sans-serif"'>Start</span></strong>.
<o:p></o:p></li>
</ol>
<p class=MsoNormal>For instructions on how to deploy the EXTRA.DAT through
ePolicy Orchestrator (ePO), see: <o:p></o:p></p>
<ul type=disc>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l9 level1 lfo3'>ePO 4.0 - <b>KB52977</b> (click <a
href="http://vil.nai.com/vil/5958_false.htm?elq_mid=2363&elq_cid=1446548#KB52977">HERE</a>
to see the relevant instructions below)<br>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l9 level1 lfo3'>ePO 4.5 - <b>KB67602</b> (click <a
href="http://vil.nai.com/vil/5958_false.htm?elq_mid=2363&elq_cid=1446548#KB67602">HERE</a>
to see the relevant instructions below) <o:p></o:p></li>
</ul>
<p class=MsoNormal><br>
<b>To restore files from Quarantine locally:</b><o:p></o:p></p>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l3 level1 lfo4'>Open the VirusScan Console. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l3 level1 lfo4'>Double-click <b>Quarantine Manager Policy</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l3 level1 lfo4'>Click the <b>Manager </b>tab. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l3 level1 lfo4'>Right-click the required item and select Restore.
<o:p></o:p></li>
</ol>
<p class=MsoNormal>For additional information, see the <b>VirusScan Enterprise
Product Guide </b>for your version of VirusScan Enterprise.<br>
<br>
For instructions on how to use an ePolicy Orchestrator Scheduled task to
restore quarantined files, see the <b>ePolicy Orchstrator Product Guide</b>.<o:p></o:p></p>
<h3>Workaround 2<o:p></o:p></h3>
<p>If the false detection has deleted or quarantined svchost.exe on your
system:<br>
<br>
<b><span style='color:red'>IMPORTANT:</span></b> Ensure that you have applied
the EXTRA.DAT to suppress the false positive detection before restoring
svchost.exe. <br>
<br>
<b>Copy the svchost.exe from a working system</b><o:p></o:p></p>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l2 level1 lfo5'>On a computer that is not affected by the issue,
navigate to the location below:<br>
<br>
<b>C:\WINDOWS\system32</b><br>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l2 level1 lfo5'>Copy <b>svchost.exe</b> to a network location or
removable media device. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l2 level1 lfo5'>On the affected system, copy <b>svchost.exe</b>
to the location below:<br>
<br>
<b>C:\WINDOWS\system32</b><br>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l2 level1 lfo5'>Restart the affected computer. <o:p></o:p></li>
</ol>
<p> <o:p></o:p></p>
<h3>Related Information <o:p></o:p></h3>
<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=950
style='width:712.5pt;border-collapse:collapse'>
<tr>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal>Threat Center (McAfee Avert Labs) <span
style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal><a href="http://www.mcafee.com/us/threat_center/">http://www.mcafee.com/us/threat_center/</a><span
style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal>Search the Threat Library<span style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal><a href="http://vil.nai.com/vil/default.aspx">http://vil.nai.com/</a> <span
style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal>Submit a virus sample<span style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal><a href="https://www.webimmune.net/default.asp">https://www.webimmune.net/default.asp</a> <span
style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal>Security updates and DAT files<span style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal><a
href="http://www.mcafee.com/apps/downloads/security_updates/dat.asp?region=us&segment=enterprise">http://www.mcafee.com/apps/downloads/security_updates/dat.asp?region=us&segment=enterprise</a><span
style='font-size:12.0pt'><o:p></o:p></span></p>
</td>
</tr>
</table>
<p> For additional information about EXTRA.DAT files, see KB68759.<o:p></o:p></p>
<p><a name=KB52977><b>To deploy the EXTRA.DAT via ePO 4.0 (KB52977)</b></a><o:p></o:p></p>
<p class=MsoNormal><strong><span style='font-family:"Calibri","sans-serif"'>Step
</span></strong><b>1 - </b>Check in the <b>EXTRA.DAT</b><o:p></o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><strong><span style='font-family:"Calibri","sans-serif";
color:maroon'>NOTES:</span></strong><strong><span style='font-family:"Calibri","sans-serif"'>
</span></strong><o:p></o:p></p>
<ul type=disc>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l4 level1 lfo6'>You cannot check in packages while any pull or
replication tasks are in progress.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l4 level1 lfo6'>If your environment requires testing new packages
before deploying them, McAfee recommends using the Evaluation branch.
After you finish testing the packages, you can move them to the Current
branch on the <strong><span style='font-family:"Calibri","sans-serif"'>Software</span></strong>,
<strong><span style='font-family:"Calibri","sans-serif"'>Master</span></strong>
<strong><span style='font-family:"Calibri","sans-serif"'>Repository</span></strong>
tab.<br>
<o:p></o:p></li>
</ul>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Log on to the ePO 4.0 console. To open a remote
console through Internet Explorer type one of the URLs below in your
browser:<br>
<br>
<b>https://<servername>:8443 <br>
https://<ipaddress_of_server>:8443</b><br>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Click the <strong><span style='font-family:
"Calibri","sans-serif"'>Software</span></strong>, <strong><span
style='font-family:"Calibri","sans-serif"'>Master Repository</span></strong>
tabs.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Click <strong><span style='font-family:"Calibri","sans-serif"'>Check
In Package</span></strong>.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Select <b>extra<strong><span
style='font-family:"Calibri","sans-serif"'>.DAT</span></strong></b>.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Click <b>Browse </b>and locate the downloaded <strong><span
style='font-family:"Calibri","sans-serif"'>extra.DAT</span></strong>, then
click <strong><span style='font-family:"Calibri","sans-serif"'>Open</span></strong>.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Click <strong><span style='font-family:"Calibri","sans-serif"'>Next</span></strong>. Information
is displayed about the <strong><span style='font-family:"Calibri","sans-serif"'>Extra.DAT</span></strong>
you are about to add to the repository.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Click <strong><span style='font-family:"Calibri","sans-serif"'>Next</span></strong>.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Select the branch where you want to add
the <strong><span style='font-family:"Calibri","sans-serif"'>extra.DAT</span></strong>.
The default branch is <strong><span style='font-family:"Calibri","sans-serif"'>Current</span></strong>.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Click <strong><span style='font-family:"Calibri","sans-serif"'>Save</span></strong>.
The <strong><span style='font-family:"Calibri","sans-serif"'>Extra.DAT</span></strong>
will now be listed under <strong><span style='font-family:"Calibri","sans-serif"'>Packages</span></strong>
in the Master Repository list on the Master Repository page.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l6 level1 lfo7'>Run a <strong><span style='font-family:"Calibri","sans-serif"'>Repository
Replication</span></strong> task to distribute the <strong><span
style='font-family:"Calibri","sans-serif"'>Extra.DAT</span></strong> file
out to all distributed or remote repositories.<o:p></o:p></li>
</ol>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><strong><span style='font-family:"Calibri","sans-serif"'>Step 2
- </span></strong>Deploy the EXTRA.DAT<o:p></o:p></p>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l1 level1 lfo8'>Create a new <strong><span style='font-family:
"Calibri","sans-serif"'>ePolicy Orchestrator Agent Update</span></strong>
task, and set the schedule to <strong><span style='font-family:"Calibri","sans-serif"'>Run
Immediately</span></strong>.<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l1 level1 lfo8'>Perform an <strong><span style='font-family:"Calibri","sans-serif"'>Agent
Wakeup call </span></strong>to send the new Update task to your clients
and apply the <strong><span style='font-family:"Calibri","sans-serif"'>extra.DAT</span></strong>.<br>
<br>
<strong><span style='font-family:"Calibri","sans-serif";color:maroon'>NOTE:</span></strong><strong><span
style='font-family:"Calibri","sans-serif"'> </span></strong>If you prefer,
you can reschedule an existing ePO Agent update task to deploy the <b>extra<strong><span
style='font-family:"Calibri","sans-serif"'>.DAT</span></strong></b>.<o:p></o:p></li>
</ol>
<p> <o:p></o:p></p>
<p><a name=KB67602><b>To deploy the EXTRA.DAT via ePO 4.5 (KB67602)</b></a><o:p></o:p></p>
<p><b>Step 1 - </b>Check in the EXTRA.DAT <br>
<br>
<b><span style='color:maroon'>NOTES: </span></b><o:p></o:p></p>
<ul type=disc>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l8 level1 lfo9'>You cannot check in packages while any pull or
replication tasks are running. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l8 level1 lfo9'>If your environment requires testing new packages
before deploying them, McAfee recommends using the Evaluation branch.
After you finish testing the packages, move them to the Current branch on
the Software, Master Repository tab. <br>
<o:p></o:p></li>
</ul>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Log on to the ePO 4.5 console. To open a remote
console through Internet Explorer, type one of the URLs below in your
browser:<br>
<br>
<b>https://<servername>:8443</b> <br>
<b>https://<ipaddress_of_server>:8443</b><br>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Click <b>Menu</b>, <b>Software</b>, <b>Master
Repository</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Click <b>Actions</b> and select <b>Check In
Package</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Select <b>extra.DAT</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Click <b>Browse</b> and locate the <b>EXTRA.DAT</b>,
then click <b>Open</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Click <b>Next</b>. Information is displayed
about the extra.DAT you are about to add to the repository. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Click <b>Next</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Select the branch where you want to add the
extra.DAT. The default branch is <b>Current</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>Click <b>Save</b>. The extra.DAT will now be
listed under <b>Packages</b> in the Master Repository list on the Master
Repository page. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l5 level1 lfo10'>If you have distributed repositories, run a <b>Repository
Replication task</b> to distribute the extra.DAT to all Distributed or
Remote repositories. <br>
<o:p></o:p></li>
</ol>
<p><b>Step 2 -</b> Deploy the extra.DAT<o:p></o:p></p>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l10 level1 lfo11'>Create a new ePolicy Orchestrator <b>Agent
Update task</b>, and set the schedule to <b>Run Immediately</b>. <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l10 level1 lfo11'>Perform an <b>Agent Wakeup call </b>to send the
new Update task to your clients and apply the extra.DAT.<br>
<br>
<b><span style='color:maroon'>NOTE:</span></b> If you prefer, you can
reschedule an existing ePO Agent update task to deploy the extra.DAT. <o:p></o:p></li>
</ol>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</body>
</html>