Take a look in the event logs for "McLogEvent" entries that have an id higher than 5000.
If any exist, the details of the event will be of interest.
Will do, thanks.
One thing, can defender be installed at the same time?
Yeah, we can coexist with Defender.
Some systems may experience slowness, it depends on their activity - you will often have both products examining a file. For most environments though any overhead will be unnoticeable.
I would prefer Defender be disabled , especially if you have the anti-spyware module installed. With VSE 8.8 release later this year the anti-spyware scanning will be incorporated into the mainline AV scanning. So I'd definitely advise disabling Defender when using that release.