We noticed that some systems are not updating AMCore in our network. We solved the issue by updating the root certificates. But only in three systems it was not solved. we tried to removing ENS then deploy it again. after deployment, ePO shows that the products are installed and platform hotfix is installed but threat prevention hotfix is not installed and ePO is not showing DAT file content version not even version 0.5. When we accessed these systems we found an issue when we open ENS then clicking about; image below:
"Under threat prevention (Failed to retrieve product information)".
Also, in mctry.exe image below:
"issue: AMSI is not responding, issue: Exploit is not responding, issue: On-Access scan is not responding, issue: ScriptScan is not responding"
We also noticed in McAfee agent that AMCore content was downloading after deployment of ENS.
Thank you for your post.
The product installation is either corrupt or partial due to which you are able to see similar error message.
Please do follow the below article:
Hope this helps!
unfortunately, this solution didn’t work.
the same behavior happened on another system today. ENS was functioning properly. I check the last scan date on that system then I changed an on-demand scan policy from epo. I woke up the agent on that system. Then the threat prevention was showing same issue. I also noticed on ENS, “ threat prevention status: not running”.
please note that the ENS was not updated or upgraded at that time.
ENS version 10.6.1
Thank you for posting in community forum. There could be many reasons why ENS would be in a not responding state and it will difficult to tell without having a look at the logs.
Could you please check if there are any other AV solutions active on the machine (like Windows Defender). Could you please run McAfee Sysprep on one of the problem machine to see if there are any dll injections happening?
Also, does removing ENS and re-installing fix your issue?
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and give a Kudo, together we can help other members.
I will try as suggested running sysprep.
after re-installing same issue is happening. Whrn I came next day, only one system showing threat prevention as healthy again.
There is a policy to disable windows defender on all systems.
all systems are windows 7 professional service pack 1
I checked mmsinfo.exe -enum
it shows that mfetp is stopped. I tried to started it says start-pending. after around one minute it goes to stopping state.
in ENS platform error logs: I found this error code: failed to get technology status for on-access scan 80000103L
similar for other scans