Windows firewall issue
After a virus/malware outbreak, SEP is corrupt. Re installation results in either a rollback or a failed installation of SEP. A message will show in SEPM that the installation failed and that the Baseline Filtering Engine could not start. When you go to SEPM you will see the PC in question in Yellow and red.