Endpoint Security on-demand scan results list all files as "Not Scanned" when no AMCore (version 0.5) is present
Last Modified: 2022-04-27 02:14:51 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Endpoint Security on-demand scan results list all files as "Not Scanned" when no AMCore (version 0.5) is present
Technical Articles ID:
KB95562
Last Modified: 2022-04-27 02:14:51 Etc/GMT Environment
Endpoint Security (ENS) Threat Prevention 10.x
Problem
An on-demand scan (ODS) task runs successfully. But, the ODS result statistics list all files as "Not Scanned" when no AMCore (version 0.5) is present.
System Change
ENS was recently installed.
Cause
ENS installs without AMCore content. The AMCore version listed at installation is "0.5." An update task is invoked after a successful installation that downloads and applies the latest available content. If the update task is interrupted or fails before applying AMCore content, all files show as "Not Scanned" in subsequent ODS task results.
Solution
Apply the latest AMCore content, or if applicable, investigate why the McAfee Agent Update task is failing. For offline systems, the V3 Virus Definition Update executable listed on the Security Updates page contains AMCore content that you can download, copy to the system, and execute locally.
Related Information
See the FAQ "Why is EICAR not being detected? Why is my content version 0.5?" in KB86704 - FAQs for Endpoint Security.
Affected ProductsLanguages:This article is available in the following languages: |
|