Permanent solution:

1.Click the Software, Master Repository tabs.
2.Click Check In Package.
3.Select extra.DAT.
4.Click Browse and locate the downloaded extra.DAT, then click Open.
5.Click Next. Information is displayed about the Extra.DAT you are about to add to the repository.
6.Click Next.
7.Select the branch where you want to add the extra.DAT. The default branch is Current.

NOTE: If the alternative branches Previous and Evaluation are unavailable, see KB52901.

8.Click Save. The Extra.DAT will now be listed under Packages in the Master Repository list on the Master Repository page.
9.Run a Repository Replication task to distribute the Extra.DAT file out to all distributed or remote repositories.

Step 2 – Deploy the EXTRA.DAT

1.Create a new ePolicy Orchestrator Agent Update task, and set the schedule to Run Immediately.
2.Perform an Agent Wakeup call to send the new Update task to your clients and apply the extra.DAT.

NOTE: If you prefer, you can reschedule an existing ePO Agent update task to deploy the extra.DAT

One-liner:

- Delete DAT 5958 from EPO repository
- Install extra.dat (download here)
- Client Update and Wakeup Call

McAfee SNS Alert:

Emergency DAT 5959 has been posted and is available at http://www.mcafee.com/apps/downloads/security_updates/dat.asp. This file is available in English and is replicating in other languages. For MORE information, go to the 5958 DAT Report on http://vil.nai.com/vil/5958_false.htm.

Source: McAfee

Repair svchost.exe

- Boot your server/computer is Safe Mode

The Windows Taskbar disappeared so you can run CMD by pressing “Windows + R” or press “CTRL + ALT + DEL” and press CRL when you click on File > New Task (RUN).

Repair SVCHOST

- C:\ [ENTER]
- cd windows\$NTServicePackUninstall$ [ENTER]
- copy svchost.exe c:\windows\system32\ [ENTER]

svchost.exe will replaced, if not you can repair it by using the i386 folder:

- C:\
- cd i386 [ENTER]
- expand svchost.ex_ c:\windows\system32\svchost.exe [ENTER]

Mcafee Antivirus

Now you need to rollback to the latest DAT definition of the McAfee Framework:

Start -> Programs-> McAfee -> McAfee Console-> Tools-> DAT’s rollback–> Answer YES to confirm

More information about DAT 5958: NAI

Some customers had some problems with bad Exchange performance when McAfee GroupShield 7.0 Patch 1 is installed. McAfee released a new hotfix called: Hotfix 491164

Information about the hotfix:

Environment

McAfee GroupShield 7.0 + Patch 1 for Microsoft Exchange
Microsoft Windows 2003
Microsoft Windows 2008
Microsoft Exchange 2003
Microsoft Exchange 2007

Problem

After starting the McAfee GroupShield 7.0 service, delays may be experienced with email processing. If the GroupShield service is stopped, mail delivery and processing returns to normal levels.

Cause

One of the processes used by GroupShield, (the Postgres process), takes an extended time to complete its I/O (input/output) operations. As a result, the GroupShield reporting threads have an extended waiting time which increases the RPC Averaged latency and results in a delay while processing email messages.

Solution

This issue is resolved in Hotfix 491164 for McAfee GroupShield 7.0 + Patch 1.

Hotfix package name: GSE7HF491164.ZIP

For more information: https://kc.mcafee.com/corporate/index?page=content&id=KB66095

Little note: Hotfixes are created to address specific issues and are not posted publicly, but are available by contacting McAfee Technical Support. I installed the hotfix and it’s resolved my problem.

“An update failed with error 800004005:Unspecified error.” zie ik in Product Log. Eenmaal hierop gezocht op internet blijkt dat dit een bekend en bestaand licentie probleem is. Hierdoor kunnen updates niet juist worden uitgevoerd op de server.

De volgende register sleutel/add zal het probleem oplossen. Deze wordt aangeraden door McAfee Support.

Register sleutel:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\McAfee GroupShield\SystemState\License\GS6]
"LicenseInfo"="0025B{${4rzU{aczTz83zR{#zJ{aczTz83zR{#zJ{+{Cz<+z>y&z$ioe{?Qy3{cy!y("
"LicenseExpiry"=dword:00000000
"LicenseType"=dword:00000004

Vervolgens services van McAfee GroupShield herstart, Update Task gestart en het systeem is weer up-to-date.

Mocht het zo zijn dat e-mail notificaties van Backup Exec niet worden verstuurd controleer

dan of de toegangsbeveiliging van McAfee dit niet blokkeert, mocht deze aan staan

dan kan je voor de backup software een exception aanmaken in de toegangsbeveiliging

op de volgende regel:

Read more…

Today with an migration from windows 2003 with exchange 2003 to Windows 2008 with exchange 2007 and McAfee Groupshield 7.0 we had the problem that the sync slow was.

We have tried alot but when we stopped GroupShield everything was fast again.

So when you use exchange 2007 with McAfee GroupShield 7 and everything is slow just remove McAfee GroupShield and everything is fast again.