Normally what I notice is when McAfee stuff is first - its because an sp/cu/fix is applied which stops and starts and reorders transport agent priority.
I would check if they are detecting if this is what you have done
The behaviour of installation scripts for the agents (in <install folder>\bin\e2007 agents\ folder) is try to find the malware agent priority and set themselves in front of that.
Thank you for your support. I reinstalled MSME agents, as shown in the article. No I can see that McAfeeTxIPAgent is listed as well, shows this agent by under front end transport service. Can you please tell be the correct order of agents by numbers.
Under console I can also see duplicate scan email for some reason, first one scanned by on-access and second one by gateway.
It looks OK as the malware agent is disabled. I don't think anything else there affects where mcafee agents are listed.
If it were my server and I was going to change I would do something like
1. Transport Rule
2. Text Routing
3. Text Delivery
7. SMTP probe Drop SMTP
8. SMTP probe drop routing
9. DLP Policy
10 Malware agent (disabled)
That is scanned against 2 policies - Gateway (where antispam and phish etc is) then standard On Access Policy (Antivirus, File Filters etc)