If ScanMail has
downloaded the current components, but you want to use a previous
component, you can manually roll back the component update.
Procedure
Stop the following ScanMail services:
ScanMail for Microsoft Exchange Remote Configuration
Server (ScanMail_RemoteConfig)
ScanMail for Microsoft Exchange Master Service (ScanMail_Master)
Delete all the files in the following folders:
<Installation folder>\AU_Data\AU_Cache\
<Installation
folder>\AU_Data\AU_Temp\
<Installation
folder>\AU_Data\AU_Storage\
<Installation
folder>\web\activeupdate\
Roll back the Smart Scan Agent pattern file, Virus pattern
file, Spyware pattern file, IntelliTrap pattern file, and the IntelliTrap
exception pattern file.
Remove the most recently downloaded pattern
files from this location:
<Installation folder>\engine\vsapi\latest
Remove the following files. Verify that ScanMail has already
downloaded an older version of these files to which you can roll
back.
The Smart Scan Agent pattern file:
ex:icrc$oth.xxx
The Virus pattern file:
ex:lpt$vpn.xxx
The Spyware pattern file:
ex:ssaptn.xxx
The IntelliTrap pattern file:
tmblack.xxx
The IntelliTrap exception file:
tmwhite.xxx
Where
"xxx" refers to the latest pattern file download.
For example:
If you have recently downloaded Virus pattern file ex:lpt$vpn.345 and
you want to roll back to a previous download pattern, ex:lpt$vpn.344,
then delete ex:lpt$vpn.345 and ScanMail will begin
to use ex:lpt$vpn.344.