We have it setup in ePO 4.5 to generate an email on "Scan found Infected Items" Event 1038. This works fine, but the category is "Task Ended" little strange and the file it actually finds is in the exclusion list. If the file is excluded shouldn't it not be scanned and found? We have it set to read/write as well. We also have deployed McAfee 8.8 and it happens in both 8.7 and 8.8. Policies are the exact same for both.