We don't run MCE in the business environment, but I have seen this in my lab at home!
I used ProcMon to determine which processes were trying to access which files. I believe all I needed to exclude were the XML files, but MCE still fails to update occasionally.
This is more a question for VirusScan than ePO.
You will probably get more response from the VirusScan forum to your question.