are the files been submitted to symantec for analysis, if not please do so. also check if SEP service is running and systems are updated with latest MS patches.