SEP client on XP reporting wrong virus definition date/ last scan + Manual scans gives "Error 536870915 occurred running scan"rates
I'm seeking some advice on this issue:
Our SEPM reports shows ~2200 SEP Clients 11.0.7101.1056 (Win XP SP3) virus definition 01/01/1970 and last scan as "never" since 21/09/201. They have been working fine for more than a year.
~1900 SEP Clients (Only in Win XP SP3) still working OK and the issue does not appears in our Win 7 computers.
When I look at the SEP clients interface the status page shows all the latest definitions are present and logs have records for all schedule scans running normaly.
However if I go to "Help and Support" -> Troblesooting -> Versions the definitions table has only one line for "IPS serial Number". In a good client I normally find other 4 entries: Definitions Patern, SyknAppS (twice) and COH. The same occurs if I export the troubleshoot data. So I believe is the client side which is reporting the wrong information to the server.
Other interesting point is these machines also gives "Error 536870915 occurred running scan" if we try to start scans manually.
I've follow the recommendations from: http://www.symantec.com/business/support/index?page=content&id=TECH166585 , but there are no difference on permissions between the computers that are working and the ones with the problem.
I would appreciate any comment.