ALERT: 5958 DAT Update Issue (For Home Users Only)
Some McAfee customers have encountered issues when using Windows XP Service Pack 3, after receiving an updated virus signature file, made available on Wednesday, April 21st (DAT 5958). Issues may include repeat restarts, a missing taskbar, or loss of internet connectivity after updating your DAT file.
Using one of the procedures below may be your fastest path to resolution. However, McAfee is also ready to assist you by telephone if these procedures do not resolve your issue, or if you would prefer to work with a ‘live’ Support agent.
This article provides two methods for resolving the DAT file issue:
NOTE: If you are not experiencing any of the above issues McAfee recommends you manually update.
To manually update:
To check your DAT version
The affected DAT version is 5958. Use the steps below to check your DAT version.
Using Manual Restoration Steps
Home users can use the following steps to restore SVCHOST.EXE on computers affected by DAT 5958.
NOTE: If you used the automated tool successfully, you do not need to perform the steps in this procedure.
If you are still unable to restore your system using the steps above, run System File Checker:
System File Checker will scan the system and attempt to repair the missing file. If System File Checker is unable to locate a replacement file, it may prompt you to insert your Windows XP disk. Insert the disk to complete the repair process.
Getting Phone Support
If you are uncomfortable running these steps, or would prefer assistance, McAfee is offering free support to resolve this issue. Call our US support lines at (866) 622-3911 and select Option 1. For local numbers in other countries, use TS100975 Customer Service Contact Numbers.
Not knowing anything about the update or DAT file, only that around noon today, I received a message to the effect of: NT Authority/System... DCom Server Process Launcher etc. followed by a countdown to shut down and restart etc. MSC was dead and I was able to run WIN MaL Sware Rmover which found nothing it says. I then ran McAfee FreeScan from the web site which also found nothing.
Would the fix you guys are working on be my solution as well? I do not know what ver DAT I presently have since MSC is not opening.
Till Somer posts back this is the way to restore Svhost and get XP PCs back up
Restoring SVCHOST.EXE on customers affected by DAT 5958
Please follow these steps exactly as directed or you may not be able to disable VirusScan.
1. Start the customer’s computer in Safe Mode. (When starting press F8 and pick Safe Mode)
2. Open My Computer
3. Double Click C:
4. Double Click Program Files
5. Double Click McAfee
6. Double Click VirusScan
7. Delete the DAT folder
8. Press Click Start>Run Type cmd and Click OK
9. In the command prompt window type CD\
10 Now type dir svchost.exe /s /b
11. The command will return the location of svchost files.
12. C:\Windows\ServicePackFiles\i386\svchost.exe is very common on XP so hopefully you find it there.
13. Once you find it copy it from that location to C:\Windows\system32
14. For example copy C:\Windows\ServicePackFiles\i386\svchost.exe c:\windows\system32
15. Once the file is copied reboot
I could not follow any of the steps above. when going into VirusScan there is no DAT file. lots of RES files but no DAT file. also when looking for the SVChost. it returns with no file. windows does not let me copy and past the SVChost from my flash drive to system32. Is there anything left i can try to get this working? anything? even when i bring up the VirusScan Console...its empty!
Hey Jerry, I'm not sure how far you got in the document. I think you'll have to copy the svchost somewhere other than system32, then copy it to system32.
i turned my pc on at 9:40 this morning. it is now 4:52pm as i begin to write what will, and i'm not remotely sorry to say, turn into a bit of a rant.
i've tried both the solutions offered on your help pages for home users. neither works. i'm lucky firefox can even get online, since none of my other web-based apps can. i'd put links to these solutions on here, but wait, i can't, you've broken my computer and i can't copy and paste.
so far today i have:
turned my computer on.
had no windows/task bar
been unable to sign in on msn
been unable to run ultima online, world of warcraft etc
got rather frustrated
checked wtf is going on, and got pretty poor information from your website.
the solution we are directed to tells us to DOUBLE CLICK SOMETHING IN THE SYSTEM TRAY THAT WE CAN'T ACCESS BECAUSE YOU BROKE OUR COMPUTERS. brilliant first step, that. i downloaded that sdat5958_em thing, it gives me error messages when i run it. this is probably because i first followed the instructions in the link on the page from which you download this file, and deleted the DAT folder first. so none of that works, no not at all.
fine, moving on, let's try replacing svchost. oh, wait, i can't do that either, i can't copy and paste it from my removable media (ipod) to my fubar computer. i've tried right click, select copy, right click, select paste; i've tried ctrl+c, ctrl+v; i've tried using cmd commands to copy things. nothing works. i've zipped svchost on my ipod (taken from my laptop which, thank god, doesn't have mcshitty on it), then unzipped it and selected system32 folder as the extraction destination. rebooted. STILL NO TASK BAR.
oh and ofc i can't do a system restore because you've broken that too.
i really can't stand to go into any more details of how many different things i've tried to fix this. i've attached a text file that was created when i first ran the thing i downloaded from your site to try and fix it (superdat.log)
can i have some clear, working instructions on how to fix this? and how about some compensation? i'm on a week off work and today was set aside for some important computery tasks, and i've wasted 8 hours of my day so far because of you. how about a free 12 month subscription to norton antivirus?Message was edited by: kronen on 4/22/10 11:10:08 AM CDT
From what you've told me, there are honestly many reasons this could have failed. For one thing, I don't know that the iPod drivers would load in safe mode. Additionally, the account you used to login might have restricted rights.
Try putting the file on a cd-rom if possible, reboot to Safe Mode (and use an administrator account). Try running the sdat5958_em.exe from the command prompt, then delete the dat file and restart. I'll put these steps below so you have them formally typed out:
If this still doesn't work for you, we need to get you in touch with a support agent so we can create a ticket and escalate this if needed. Please let me know, I'll do whatever I can to help you out!
Had exact same problem. I copied from the command prompt, from a portable drive, to the desktop. I apologise if I'm pointing out the obvious, but did you put speech marks around the path.
e.g. C:\Documents and Settings\Kronen\Desktop> copy where_the_file_is_stored_and_it's_name_and_extension
after doing this boot in safe mode, this is best done in msconfig and change the boot.ini
now run the macafee program
change boot.ini back to normal
re-install network connections
and hopefully Bob's your cross-dressed auntie.
just read your dat log and it looks like Mcafee was running - safe mode should stop this - there should be no icon on the systray
Somer - you should have spotted that and helped him out!!!!!!
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: