Microsoft KB Archive/920304

= How to manually rebuild the antivirus scan engine in Microsoft Antigen 9.0 for Exchange =

Article ID: 920304

Article Last Modified on 3/13/2007

-

APPLIES TO


 * Microsoft Antigen for Exchange

-



INTRODUCTION
This article describes how to manually rebuild the antivirus scan engine in Microsoft Antigen 9.0 for Microsoft Exchange.

Important Before you rebuild a scan engine in Antigen 9.0 for Exchange, we recommend that you first contact Microsoft Product Support Services (PSS) to help determine whether the problem that you experience requires a scan engine rebuild operation.

For information about how to contact Microsoft PSS, visit the following Web site:

http://support.microsoft.com/contactussupport/?ws=support



MORE INFORMATION
On a computer that is running Antigen 9.0 for Exchange, you may experience a problem that causes the Antigen scan engine to stop working correctly. After you contact Microsoft PSS to help troubleshoot the symptoms that you experience, you may be directed by Microsoft PSS to rebuild the scan engine. Symptoms that may require that you to rebuild a scan engine include the following symptoms:
 * Scan engine files become locked. Therefore, a scan engine can no longer be automatically updated.
 * A scan engine generates an error message when it tries to load.

When any of these symptoms occur, one of the following errors may be logged in the %ProgramFiles%\Microsoft Antigen for Exchange\ProgramLog.txt file:
 * &quot;ERROR: Could not create mapper object&quot;
 * &quot;INFORMATION: The  engine was rolled back&quot;
 * &quot;ERROR: Scan engine was corrupted on download&quot;
 * &quot;ERROR: CheckCrc failed&quot;

Note The procedure that is described in this article mentions the Microsoft AV scan engine. However, this procedure applies to any licensed scan engine in Antigen 9.0 for Exchange. If you use a scan engine other than the Microsoft AV scan engine, substitute one of the following scan engine names as appropriate:
 * Ahnlab
 * CAIris (also known as CAInoculateIT)
 * CAVet
 * Command
 * Kaspersky
 * Norman
 * Sophos
 * Spamcure (an antispam engine)
 * VBuster (also known as Virus Buster)

To rebuild the Antigen 9.0 for Exchange scan engine, follow these steps:  Create the UNC Update Folder structure. To do this, follow these steps:  Create a directory that is named &quot;Antigen.&quot; In the Antigen directory, create a directory that is named &quot;Engines.&quot; In the Engine directory, create a directory that is named &quot;x86.&quot; In the x86 directory, create a folder for the engine on which you are working. For example, create a folder that is named &quot;Microsoft.&quot; In the %EngineName% directory, create a folder that is named &quot;Package.&quot;

An example of the UNC Update Folder path is as follows:

C:\Antigen\Engines\x86\Microsoft\Package

</li> Download the latest scan engine files. To do this, follow these steps:  Save the Manifest.cab file to the Package folder for the engine that you are updating. An example of the path of this file in the directory is as follows:

C:\Antigen\Engines\x86\Microsoft\Package\manifest.cab

To obtain the Manifest.cab file, visit the following Microsoft Web site:

http://antigendl.microsoft.com/antigen/x86/Microsoft/Package/manifest.cab

</li> Extract the Manifest.xml file from the Manifest.cab file, and then open the Manifest.xml file by using a text editor, such as Notepad.

Search for the &quot;version=&quot; string in the Manifest.xml file. After one of the instances of &quot;version=,&quot; a 10-digit number is displayed.

For example, locate the entry that resembles the following entry:

version=&quot;0606080004&quot;

In this entry, the 10-digit number represents the update version number of the latest update. For this article, this update version number is represented by the  placeholder.</li> Save the Microsoft_fullpkg.cab file to a directory that has the same version name within the Package folder. An example of the path of this file in the directory is as follows:

C:\Antigen\Engines\x86\Microsoft\Package\0606080004\Microsoft_fullpkg.cab

To obtain the Microsoft_fullpkg.cab file, visit the Microsoft Web site whose URL resembles the following URL:

http://antigendl.microsoft.com/antigen/x86/Microsoft/Package/ \microsoft_fullpkg.cab

Important In this URL, replace  with the update version number that you located in step 2b.

For example, use a URL that resembles the following sample URL:

http://antigendl.microsoft.com/antigen/x86/Microsoft/Package/0606080004\microsoft_fullpkg.cab

</li> Copy the Manifest.cab file in the Package folder, and then paste the file into the &quot;%Version%&quot; folder. An example of the final structure of the file is as follows:

c:\Antigen\Engines\x86\Microsoft\Package\manifest.cab

c:\Antigen\Engines\x86\Microsoft\Package\0606080004\manifest.cab

c:\Antigen\Engines\x86\Microsoft\Package\0606080004\Microsoft_fullpkg.cab

</li></ol> </li> Update the engine. To do this, follow these steps:  Open the Antigen Administrator.</li> Under SETTINGS, click Scanner Updates.</li> Select the engine on which you are working. For example, select Microsoft.</li> Change Network Update Path to the parent directory of the x86 folder. For example, change this item to &quot;C:\Antigen\Engines.&quot;</li> Click Save.</li> Click Update Now.</li></ol> </li></ol>

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Keywords: kbhowto kbinfo KB920304

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.