Answer

PROBLEM

An antivirus engine definition has become corrupt and cannot be initialized or successfully complete Auto-Updates.

ENVIRONMENT

• GFI MailEssentials
• All supported environments

SOLUTION

1. Navigate to the following directory <GFI MailEssentials installation path>\GFI\MailEssentials\Updater\sed and delete the following files:
   • trojandb_current_revision.txt
   • trojandb_current_revision.txt.checked
   • trojandb_current_revision.txt.tmp
2. Open Services.msc and restart the GFI MailEssentials AV Scan Engine and GFI MailEssentials Autoupdater services.
3. Open the MailEssentials Configuration and navigate the drop-downs to  Email Security > Virus Scanning Engines > Trojan & Executable Scanner > Updates.
4. Click Download Updates and click Apply.
5. Verify that the definitions successfully installed on the Update status section.

Solution 2
If the above steps do not update the definitions a manual update is required in order to clear the possible corrupt definitions out of the GFI MailEssentials directories. Follow the steps below in order to complete the manual update process.

1. Open a browser and navigate to http://cdnupdate.gfi.com/
2. Navigate to the following directory incav2 > trojandb > C1 folder and click the trojandb_current_version.c1.zip link to download the latest Trojan and Executable definitions.
3. After the download has completed you will need to navigate to service.msc and stop the SMTP or transport service (note this will stop mail flow and queue the messages in Exchange until restarted).
4. In services.msc console locate and stop all gfi services related to MailEssentials.
5. Extract the downloaded zip from step 2 to the following location <GFI MailEssentials installation path>\GFI\MailEssentials\Updater\sed overwrite when prompted by windows.
6. Navigate to the directory where you just extracted the files to from the previous step, <GFI MailEssentials installation path>\GFI\MailEssentials\Updater\sed, and locate the file trojandb.zip
7. Extract the trojandb.zip twice to the following locations (overwrite when prompted):
   • <GFI MailEssentials installation path>\GFI\MailEssentials\EmailSecurity\Engines\sed
   • <GFI MailEssentials installation path>\GFI\MailEssentials\EmailSecurity\Engines\Backup\SED
8. Start all services stopped in step 3 and 4.
9. Open the MailEssentials configuration and verify that the Trojan and Executable scanning engine has been updated Successfully with the latest version

CAUSE

• The definitions files were corrupted and that can cause update failures.
• Third party antivirus or backup scanning of the GFI MailEssentials folders can corrupt definitions.
• Content filter type Hardware firewalls can corrupt the MD5 checksum during the update process please verify the proper exclusions are in your hardware firewall for successful updates. See the following article for the current update sites needed to be excluded in your firewall https://www.gfi.com/support/products/gfi-mailessentials/What-sites-are-used-for-GFI-Product-Updates