The
MER.exe does not run when MACC is in
Enabled mode.
The
Solidcore log records the following message:
McAfee Application Control prevented an attempt to modify file C:\Users\Administrator\AppData\Local\Temp\Mc64BitResolver.exe by process C:\Users\Administrator\AppData\Local\Temp\WebMERClient.exe (Process Id: <PID>, User: <user>).
The
s3diag log records an entry similar to the following:
< WRITE_DENIED file_name="C:\Users\Administrator\AppData\Local\Temp\Mc64BitResolver.exe" pid="4752" process_name="C:\Users\Administrator\AppData\Local\Temp\WebMERClient.exe" ppid="2584" parent_process_name="C:\Users\Administrator\Desktop\MER.exe" event_time="1487091827928" event_time_system="Feb 14 2017:17:03:47" is_system_file="false" deny_reason="File-solidified" user_name="<user>" />