IT 防垃圾邮件指南02.doc

IT 防垃圾邮件指南之一 ver.2010-02Exchange Server服务器端1. Mcafee Groupshild 手动升级病毒库Corporate KnowledgeBaseManually updating the GroupShield 6.x DAT files Back to Answers Printer Friendly Rate this Page Corporate KnowledgeBase ID: KB57197 Published: November 17, 2008 Environment McAfee GroupShield 6.0.1 for Microsoft Exchange 2000McAfee GroupShield 6.0.2 for Microsoft Exchange 2000McAfee GroupShield 6.0.3 for Microsoft Exchange 2007Microsoft Exchange 2000Microsoft Exchange 2003Microsoft Exchange 2007Microsoft Windows 2000Microsoft Windows 2003Video Tutorial NOTE: Adobe Flash Player is required. For further details, go to: /products/flashplayer/ To view a list of tutorials, go to the McAfee ServicePortal at /Eservice/Default.aspx and click View Tutorials.To view this tutorial, see: Manually updating the GroupShield 6.x DAT filesSolution 1 CAUTION: This article contains information about opening or modifying the registry.The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly. Before proceeding, McAfee strongly recommends backing up your registry and understanding the restore process. For more information, see: /kb/256986 Do not run a .REG file that is not confirmed to be a genuine registry import file. In some circumstances, it may be necessary to update GroupShields .DAT files manually. For example, in order to respond quickly to an outbreak situation, a manual update of GroupShields .DAT files might be required.When updating .DAT files manually, it is important to update the DATVersion value in the SystemState registry key. (This process is detailed below.) GroupShield does not use the new DAT set if the registry is not updated to reflect the physical location for the new files.The new .DAT files are loaded when the next item is scanned by GroupShield. The updated DAT information is not displayed until the next scan occurs. This can be verified by examining the scanner information, which is visible in the Anti-Virus settings of the Anti-Virus and Content window.Download the latest DATsFirstly, follow these steps to obtain the latest DAT files.Go to the following website: /apps/downloads/security_updates/engines.asp?region=us&segment=enterpriseClick DATs.-下载最新的病毒库文件In the DAT File column, right-click the dat-xxxx.zip file and choose Save Target As.Browse to the location that you want to save the DAT file to and click Save.When the file download is complete, double-click the dat-xxxx.zip file to extract the individual DAT files from it. Default DAT file locations GroupShield stores its .DAT and scan engine files in specific sub-directories of the products installation location. Every time a DAT or engine update is performed, a new sub-directory is created where the updated files are copied to. The .DAT files are stored in:binDATs Manually update the DAT files 解压病毒库软件,安装Create a new directory underbinDATs and copy the .DAT files into it:Double-click My Computer. Navigate to the binDATs folder. With the DATs folder selected, click File, New Folder. A new folder is created with the name highlighted. Type the four-digit number of the DAT version (for example, 4581). Press ENTER to rename the folder. Locate the .DAT files to be updated, (SCAN.DAT, NAMES.DAT and CLEAN.DAT), and copy them to the newly created folder. Modify the registry to reflect the new version number: Click Start, Run, and type: regedit. Click OK. This opens the Registry Editor. Locate the following registry key:HKEY_LOCAL_MACHINESOFTWARENetwork AssociatesMcAfee GroupShieldSystemStateDouble-click the DATVersion registry value. Type the name of the previously created directory (for example, 4581), as the Value Data. Close regedit. NOTE: Verify that GroupShield has been set to use the new DAT set by checking the version information on the GroupShield home page. The DAT Version value that is listed in the Product Versions table should now reflect the manual update. Solution 2 Additional information: Both Engine and DATs can be updated by running a SuperDAT - follow these steps to do this:Go to the following website: /apps/downloads/security_updates/engines.asp?region=us&segment=enterprise Click SuperDATs.In the DAT File column, right-click the sdatxxxx.exe file (where xxxx is the DAT version) and choose Save Target As.Browse to the location that you want to save the SuperDAT to and click Save.Double-click the sdatxxxx.exe file and follow the prompts to install it.NOTE: In some circumstances it may be necessary to force the installation of both Engine and DATs. This can be achieved with the use of the /F parameter. For example:Click Start, Run.Drag the sdatxxxx.exe file into the Run dialog - the full path of the executable appears in the Open line.Append /F to the path in the Open line and click OK.Solution 3 See also : KB57811 for details on rolling back the GroupShield 6.x DAT files2. Mcafee Groupshild 手动升级防垃圾规则及引擎Corporate KnowledgeBaseManually updating the McAfee Groupshield v2.1.x Engine and Rule Set Printer Friendly Rate this Page Corporate KnowledgeBase ID: KB55339 Published: November 17, 2008 Environment McAfee Groupshield 2.1.1 for Microsoft Exchange 2000McAfee Groupshield 2.1.2 for Microsoft Exchange 2000McAfee GroupShield 6.0.1 for Microsoft Exchange 2000McAfee GroupShield 6.0.2 for Microsoft Exchange 2000Microsoft Windows 2000Microsoft Windows 2003Video Tutorial NOTE: Adobe Flash Player is required. For further details, go to: /products/flashplayer/ To view a list of tutorials, go to the McAfee ServicePortal at /Eservice/Default.aspx and click View Tutorials.To view this tutorial, see: Manually updating the Groupshield 2.1x Engine and Rule SetSolution 1 CAUTION: This article contains information about opening or modifying the registry.The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly. Before proceeding, McAfee strongly recommends backing up your registry and understanding the restore process. For more information, see: /kb/256986 Do not run a .REG file that is not confirmed to be a genuine registry import file. Stop McAfee Groupshield:Click Start, Programs, Administrative Tools, Services. Right-click the McAfee Groupshield service. Click Stop.Download and Extract Files:Download the latest renu (rules and engine update) package available from: /spamdefs/1.x NOTE: Because it is updated on a regular basis, the file name will change but will be similar to SpamAssassin.renu.MAA.23xx.zip (where xx is the latest RuleSet version). In Windows Explorer, navigate to: .Network AssociatesMcAfee GroupshieldbinAntiSpamRules.NOTE: When applying the new rules to McAfee GroupShield 6, replace Groupshield with Groupshield in directory listings. Ceate a new folder named: 23xx (where xx is the latest RuleSet version). 在mcafee shield目录下建数据目录(根据规则版本命名)Double-click on the new 23xx folder. Create another folder named: Live 在mcafee shield目录下建数据目录下建live子目录Locate the path: .Network AssociatesMcAfee GroupshieldbinAntiSpamEngine. Create a new folder named: 23xx Extract the renu .zip file to a temporary directory. Extract all files from rules.zip to: .Network AssociatesMcAfee GroupshieldbinAntiSpamRules23xx renu.zip文件解压至规则数据目录Extract all files from live.zip to: .Network AssociatesMcAfee GroupshieldbinAntiSpamRules23xxLive live.zip文件解压至规则数据目录live子目录Copy the following files to: McAfee GroupshieldbinAntiSpamEngine23xx copy下列文件至groupshild的引擎目录spamdcom.dll su.dll fingerprint Public.key msvcr71.dllNOTE: If msvcr71.dll is not present in the renu package, obtain it from the previous version.Unregister Current RuleSet Version:Click Start, Run . . . type CMD and click OK. In the command window, type: CD Program FilesNetwork AssociatesMcAfee GroupshieldbinAntiSpamEngine23xx and press ENTER. In the command window, type: regsvr32 -u spamdcom.dll 从注册表中将原引擎解除Register Newest RuleSet Version: In the command window, type: CD Program FilesNetwork AssociatesMcAfee GroupshieldbinAntiSpamEngine23xx and press ENTER. In the command window, type: regsvr32 spamdcom.dll 注册新引擎Close the command window.Change the Registry K