Mcafee EPO OnAccessScanLog.txt contains "none (Virus)" entries

[Former Member]

Hi All,

I am confused with certain entries in OnAccessScanLog.txt of Mcafee EPO.

11/16/2017 12:49:04 PM Statistics:
11/16/2017 12:49:04 PM Files scanned: 29374
11/16/2017 12:49:04 PM Files detected: 0
11/16/2017 12:49:04 PM Files cleaned: 0
11/16/2017 12:49:04 PM Files deleted: 0

11/16/2017 1:38:01 PM Engine version = 5900.7806
11/16/2017 1:38:01 PM AntiVirus DAT version = 8716.0
11/16/2017 1:38:01 PM Number of detection signatures in EXTRA.DAT = None
11/16/2017 1:38:01 PM Names of detection signatures in EXTRA.DAT = None
11/16/2017 1:48:48 PM Not scanned (scan timed out) NT AUTHORITY\SYSTEM C:\Windows\System32\rundll32.exe C:\Users\<user_name>\Downloads\SOMEFILENAME.exe none (Virus)
11/16/2017 1:49:36 PM Not scanned (scan timed out) NT AUTHORITY\SYSTEM C:\Windows\System32\rundll32.exe D:\softwares\AnotherEXE.exe none (Virus)

What does the above log entry mean? Can anyone please explain.

I see a similar question that has been posted last year but no answer has been posted.
https://community.mcafee.com/t5/ePolicy-Orchestrator/McAfee-EPO-OnAccessScanLog-txt-contains-None-Vi...

I hope my answer will be replied and resolved.

Thanks in Advance

[tucker84]

Are you running VSE patch 11 without any hotfixes by chance?

[Former Member]

No, We have EPO deployed

[tucker84]

Do you mean that you have ENS deployed? If that's the case do you have the latest version?

[Former Member]

Sorry, I got confused earlier.

We have VirusScan Enterprise with us. We have version 8.8 right now.

[tucker84]

Which patch of VSE 8.8 are you running?

[Former Member]

Installed Patches:9
Scan Engine: 5900.7806
Version Number: 8.8.0(8.8.0.1804)
DAT Version: 8917.0

Anything else ?

[tucker84]

Try VSE patch 11 and see if that resovles your issue. There are a few hotfixs also available for patch 9 that you might be able to try.