DTAM005 - McAfee VirusScan On-Access Scanner General Settings must be configured to prevent users from removing messages from the list.
Good incident response analysis includes reviewing all logs and alerts on the system reporting the infection. If users were permitted to remove alerts from the display, incident response forensic analysis would be inhibited.
Access the local VirusScan console by clicking Start->All Programs->McAfee->VirusScan Console. On the menu bar, click on Task->On-Access Scanner Properties. Select the General Settings. Under the Messages tab, locate the 'Actions available to user:' label. Uncheck the 'Remove messages from the list' option. Click OK to Save.