⚑ Deus Ex Machina ➽ Eventlog Lookup

Deus Ex Machina » Eventlog » Event 258 - McLogEvent

McLogEvent - 258


Warning

Description »
The update failed; see event log.
Data formatted as » None

This message may appear to be a little contradictory.
The update failed; see event log.
Well guess where I'm seeing this? In the Windows Event Logs!
What it should probably say is 'see the McAfee updatelog.txt file'.
This file usually lives in %ALLUSERSPROFILE%\Application Data\McAfee\DesktopProtection on VSE 8.5i.
Looking at this file, you should find a reason for the failure:

08/06/2011	17:46:00	NT AUTHORITY\SYSTEM	Starting task: AutoUpdate
08/06/2011	17:46:51	NT AUTHORITY\SYSTEM	Unable to find a valid repository.
08/06/2011	17:46:51	NT AUTHORITY\SYSTEM	Update process failed.

In this instance, it was because the ePolicy Orchestrator service was down. I have seen it happen in the past where the UpdateLog.txt file complains of the error SPAMSAFE1000 or SUPPCLNT1000. This can be resolved by locating and deleting the folder with the same name as the error - then rerunning the update task. The directory should be under %ALLUSERSPROFILE%\Application Data\McAfee\Common Framework\Current. If you're sqeamish about deleting files, you can rename or move the folders.
Alternatively - I find that applying a SuperDAT (engine + DAT update) resolves a lot of issues with VirusScan updating.