This message was deleted.

With these kind of endpoint protection, you need to pre-scan your golden image before you seal it. I'm not familiar with McAfee's product but with Palo Alto Traps they have a well documented process for doing this.