From: David H. Lipman on
From: "Eep�" <eepNOSPAM(a)tnlc.com>



| You can get engine updates at ftp://ftp.nai.com/pub/antivirus/engine/4.x/

DLL only for GUI, not the command line scanner.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: charles on
On Wed, 19 May 2010 13:09:37 -0700 (PDT), Eep² <eepNOSPAM(a)tnlc.com>
wrote:

>I have a McAfee VirusScan DAT updater called MCUP (McAfee DAT Updater,
>http://tnlc.com/eep/mcup.zip ) (readme at http://tnlc.com/eep/mcup.txt
>) which I've been using since 2003, that stopped working after April
>2, 2010 (when McAfee changed their antivirus DAT zip file name--avv-
>dat####.tar now) and contents). It no longer works so I'm back to
>manually downloading DAT files for the command-line version (I refuse
>to have the bloatware GUI AntiVirus constantly running in the
>background). Can anyone can create a program to download the latest
>DAT file at http://download.nai.com/products/commonupdater/ or
>ftp://ftp.nai.com/pub/antivirus/datfiles/4.x/ (now only has a tar
>file--no zip--but the SuperDAT exe can be manually extracted via "/e"
>switch for its DATs) and verify it against the current DATs so they
>are not mindlessly redownloaded? I have command-line wget and unzip
>programs and use a batch file to rename and move the DATs. Even better
>would be to use the incremental DAT updates in http://download.nai.com/products/commonupdater/
>(*.gem files) instead of having to download the obnoxiously large
>~70MB (and growing with each update) compiled DAT file.
>
>Thanks!
>
>http://groups.google.com/group/alt.comp.anti-virus/browse_thread/thread/51fe27c5ed9e2c00/6e41b091483b7220
>to see the original thread and a more recent thread on McAfee's site
>(no response so far) at http://community.mcafee.com/thread/24897

Here you go,

===== Start batch clip (watch wrapping)
[01] @echo off
[02] pushd .
[03] cd /d "D:\Download\AV\mcafee"
[04] if /i arg%1 == arg/nodl goto :NODL
[05] wget -N -q --connect-timeout=15 --read-timeout=20
"ftp://ftp.nai.com//pub/antivirus/datfiles/4.x/sdat*.exe"
[06] :NODL
[07] dir /b /aa sdat*.exe >mcaf.lst 2>&1
[08] if errorlevel 1 goto :END
[09] for /f %%x in (mcaf.lst) do @if exist %%x start "" /wait %%x /e
%temp%\latest
[10] if exist %temp%\latest\. (xxcopy /v2 /da /zs /q3 /y
%temp%\latest\*.* C:\mcafee\) else (echo Some kind of error occurred.)
[11] rd /s /q %temp%\latest
[12] for /f %%d in ('dir /b /a-a sdat*.exe') do if exist "%%d" del "%%d"
[13] attrib -a sdat*.exe
[14] del mcaf.lst
[15] rem C:\util\contig153.exe -q C:\mcafee\*.* >NUL
[16] :END
[17] popd
===== End batch clip


From: charles on
On Thu, 20 May 2010 12:32:24 +0000, charles <someone(a)somewhere.invalid>
wrote:

>On Wed, 19 May 2010 13:09:37 -0700 (PDT), Eep² <eepNOSPAM(a)tnlc.com>
>wrote:
>
>>I have a McAfee VirusScan DAT updater called MCUP (McAfee DAT Updater,
>>http://tnlc.com/eep/mcup.zip ) (readme at http://tnlc.com/eep/mcup.txt
>>) which I've been using since 2003, that stopped working after April
>>2, 2010 (when McAfee changed their antivirus DAT zip file name--avv-
>>dat####.tar now) and contents). It no longer works so I'm back to
>>manually downloading DAT files for the command-line version (I refuse
>>to have the bloatware GUI AntiVirus constantly running in the
>>background). Can anyone can create a program to download the latest
>>DAT file at http://download.nai.com/products/commonupdater/ or
>>ftp://ftp.nai.com/pub/antivirus/datfiles/4.x/ (now only has a tar
>>file--no zip--but the SuperDAT exe can be manually extracted via "/e"
>>switch for its DATs) and verify it against the current DATs so they
>>are not mindlessly redownloaded? I have command-line wget and unzip
>>programs and use a batch file to rename and move the DATs. Even better
>>would be to use the incremental DAT updates in http://download.nai.com/products/commonupdater/
>>(*.gem files) instead of having to download the obnoxiously large
>>~70MB (and growing with each update) compiled DAT file.
>>
>>Thanks!
>>
>>http://groups.google.com/group/alt.comp.anti-virus/browse_thread/thread/51fe27c5ed9e2c00/6e41b091483b7220
>>to see the original thread and a more recent thread on McAfee's site
>>(no response so far) at http://community.mcafee.com/thread/24897
>

I should have mentioned that I have put together a few of these batch av
updaters that I put in a specific folder and run as scheduled background
jobs using a cron-like entry that executes the following on a once-a-day
schedule. Using Windows XP.

===== Start batch clip (watch wrapping)
[01] @echo off
[02] echo Updated: %date% %time% >>"C:\My
Documents\Dev\bat\upd-qb\av_update.log"
[03] for /r "C:\My Documents\Dev\bat\upd-qb" %%x in (*.bat) do @start ""
/b /min c:\util\hidden.exe "%%x"
===== End batch clip


From: Eep² on
On May 20, 5:32 am, charles <some...(a)somewhere.invalid> wrote:
> On Wed, 19 May 2010 13:09:37 -0700 (PDT), Eep² <eepNOS...(a)tnlc.com>
> wrote:
>
> >I have a McAfee VirusScan DAT updater called MCUP (McAfee DAT Updater,
> >http://tnlc.com/eep/mcup.zip) (readme athttp://tnlc.com/eep/mcup.txt
> >) which I've been using since 2003, that stopped working after April
> >2, 2010 (when McAfee changed their antivirus DAT zip file name--avv-
> >dat####.tar now) and contents). It no longer works so I'm back to
> >manually downloading DAT files for the command-line version (I refuse
> >to have the bloatware GUI AntiVirus constantly running in the
> >background). Can anyone can create a program to download the latest
> >DAT file athttp://download.nai.com/products/commonupdater/or
> >ftp://ftp.nai.com/pub/antivirus/datfiles/4.x/(now only has a tar
> >file--no zip--but the SuperDAT exe can be manually extracted via "/e"
> >switch for its DATs) and verify it against the current DATs so they
> >are not mindlessly redownloaded? I have command-line wget and unzip
> >programs and use a batch file to rename and move the DATs. Even better
> >would be to use the incremental DAT updates inhttp://download.nai.com/products/commonupdater/
> >(*.gem files) instead of having to download the obnoxiously large
> >~70MB (and growing with each update) compiled DAT file.
>
> >Thanks!
>
> >http://groups.google.com/group/alt.comp.anti-virus/browse_thread/thre...
> >to see the original thread and a more recent thread on McAfee's site
> >(no response so far) athttp://community.mcafee.com/thread/24897
>
> Here you go,
>
> ===== Start batch clip (watch wrapping)
> [01] @echo off
> [02] pushd .
> [03] cd /d "D:\Download\AV\mcafee"
> [04] if /i arg%1 == arg/nodl goto :NODL
> [05] wget -N -q --connect-timeout=15 --read-timeout=20
> "ftp://ftp.nai.com//pub/antivirus/datfiles/4.x/sdat*.exe"
> [06] :NODL
> [07] dir /b /aa sdat*.exe >mcaf.lst 2>&1
> [08] if errorlevel 1 goto :END
> [09] for /f %%x in (mcaf.lst) do @if exist %%x start "" /wait %%x /e
> %temp%\latest
> [10] if exist %temp%\latest\. (xxcopy /v2 /da /zs /q3 /y
> %temp%\latest\*.* C:\mcafee\) else (echo Some kind of error occurred.)
> [11] rd /s /q %temp%\latest
> [12] for /f %%d in ('dir /b /a-a sdat*.exe') do if exist "%%d" del "%%d"
> [13]  attrib -a sdat*.exe
> [14] del mcaf.lst
> [15] rem C:\util\contig153.exe -q C:\mcafee\*.* >NUL
> [16] :END
> [17] popd
> ===== End batch clip

If I understand the batch file, it still has to download sdat*.exe
first before checking if it's different from the existing DAT file.
Any way for it to remember the current version and check the ftp
directory like MCUP does?
From: charles on
On Fri, 21 May 2010 21:30:01 -0700 (PDT), Eep² <eepNOSPAM(a)tnlc.com>
wrote:

>On May 20, 5:32 am, charles <some...(a)somewhere.invalid> wrote:
>> On Wed, 19 May 2010 13:09:37 -0700 (PDT), Eep² <eepNOS...(a)tnlc.com>
>> wrote:
>>
>> >I have a McAfee VirusScan DAT updater called MCUP (McAfee DAT Updater,
>> >http://tnlc.com/eep/mcup.zip) (readme athttp://tnlc.com/eep/mcup.txt
>> >) which I've been using since 2003, that stopped working after April
>> >2, 2010 (when McAfee changed their antivirus DAT zip file name--avv-
>> >dat####.tar now) and contents). It no longer works so I'm back to
>> >manually downloading DAT files for the command-line version (I refuse
>> >to have the bloatware GUI AntiVirus constantly running in the
>> >background). Can anyone can create a program to download the latest
>> >DAT file athttp://download.nai.com/products/commonupdater/or
>> >ftp://ftp.nai.com/pub/antivirus/datfiles/4.x/(now only has a tar
>> >file--no zip--but the SuperDAT exe can be manually extracted via "/e"
>> >switch for its DATs) and verify it against the current DATs so they
>> >are not mindlessly redownloaded? I have command-line wget and unzip
>> >programs and use a batch file to rename and move the DATs. Even better
>> >would be to use the incremental DAT updates inhttp://download.nai.com/products/commonupdater/
>> >(*.gem files) instead of having to download the obnoxiously large
>> >~70MB (and growing with each update) compiled DAT file.
>>
>> >Thanks!
>>
>> >http://groups.google.com/group/alt.comp.anti-virus/browse_thread/thre...
>> >to see the original thread and a more recent thread on McAfee's site
>> >(no response so far) athttp://community.mcafee.com/thread/24897
>>
>> Here you go,
>>
>> ===== Start batch clip (watch wrapping)
>> [01] @echo off
>> [02] pushd .
>> [03] cd /d "D:\Download\AV\mcafee"
>> [04] if /i arg%1 == arg/nodl goto :NODL
>> [05] wget -N -q --connect-timeout=15 --read-timeout=20
>> "ftp://ftp.nai.com//pub/antivirus/datfiles/4.x/sdat*.exe"
>> [06] :NODL
>> [07] dir /b /aa sdat*.exe >mcaf.lst 2>&1
>> [08] if errorlevel 1 goto :END
>> [09] for /f %%x in (mcaf.lst) do @if exist %%x start "" /wait %%x /e
>> %temp%\latest
>> [10] if exist %temp%\latest\. (xxcopy /v2 /da /zs /q3 /y
>> %temp%\latest\*.* C:\mcafee\) else (echo Some kind of error occurred.)
>> [11] rd /s /q %temp%\latest
>> [12] for /f %%d in ('dir /b /a-a sdat*.exe') do if exist "%%d" del "%%d"
>> [13]  attrib -a sdat*.exe
>> [14] del mcaf.lst
>> [15] rem C:\util\contig153.exe -q C:\mcafee\*.* >NUL
>> [16] :END
>> [17] popd
>> ===== End batch clip
>
>If I understand the batch file, it still has to download sdat*.exe
>first before checking if it's different from the existing DAT file.
>Any way for it to remember the current version and check the ftp
>directory like MCUP does?

Not quite.

The first time it runs it will download sdat*.exe to its local home
directory ("D:\Download\AV\mcafee"). That local file stays there (until
it is deleted in a future run). On subsequent runs it uses wget.exe's -N
switch to not download the same version/file again.

Then, by evaluating the archive bit of the existing sdat*.exe, it uses
the sdat*.exe filename version string (extracted to mcaf.lst) to process
the latest sdat version available by running it with the /e switch to a
temp directory. It then copies all the new data to the live mcafee
location and removes the temp contents and location.

It then removes any sdat*.exe local file that remain from a previous
download and finally, flips the archive bit of the latest local
sdat*.exe so that it can direct processing when it downloads a new
sdat*.exe next time.

I originally put it together after being unsatisfied with MCUP some time
ago and has worked well for me anyway.