Remove extra.dat with EPO

[Former Member]

I want to remove an extra.dat file from my endpoints with EPO. I have deleted the extra.dat file from the master repository and hoped that after the autoupdate the extra.dat file would be deleted from my endpoints but nothing happenes.

How can I remove the extra.dat file from my endpoints ?

[ansarias]

Hello,

Yes you can delete it from ePO master repository but Extra DAT file can't be remove from ePO console on local machine. It can be replaced by new extra dat file but you can't delete.

Best option is remove locally extra dat file on machine and restart the system. But if will OK for few machines not for all the clients.

[JoeBidgood]

Additionally, extra dats have an expiry date: once the signature they contain is included in the main dat, the extra dat is no longer used even though it's still present.

HTH -

Joe

[Former Member]

The best and quick way is to create a pup (Unwanted program) user detection for Extra.dat. Then do a Scan in the Engine McAfee folder and the extraDAT will be detected and deleted

Best regards,

Jose

[ansarias]

Thanks for update

It will be great if you please share it with us with screen shot.

[Former Member]

Hi,

Please find attached the screenshot from my standalo installation. For ePO should be the same but defined in the ePO policies.

Best regards,

Jose

[ffigueroag]

Hello,

I have the same issue, after McAfee Support make a BIG MISTAKE sending me an Extra.dat that deleted wrong files, I have to remove from my endpoints and dont know how do it, manually in 2000 endpoint its a joke 

[aguevara]

Please open a service request (or continue working with the request were the extra dat is provided), im sure the point product (ENS) has a way to restore files if they are quarantined but please continue working with that team under an SR for this

Regards

Alejandro

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[ffigueroag]

Hola Alejandro,
Sigo trabajando con el soporte, pero la verdad estoy muy decepcionado, estan muy lentos, demoran para asistirnos sabiendo el alto impacto y ruido que esto esta causando en la institucion.

[aguevara]

sorry to hear, lets try to get some track, could you please share privately your SR number with me?