cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
PeDe
Level 7
Report Inappropriate Content
Message 1 of 6

Adaptive Threat Protection service (mfeatp.exe) crashes and restarts automatically in 10.7

Hi,

we started experiencing issues that mfeatp.exe is not running on several Servers. The important thing is ePO doesn´t recognize that the mfeatp Process is crashing and also the McAfee Selfprotection can´t prevent or heal it. The First Server we investigated was a Server where we updated the Product to the July Patch but not rebooted ( since no Reboot was requested but it was definetly logged in the Bootstrapper Log in c:\windows\temp\McAfeelogs\ with a 3010 ) So here we got the Info the necessary Reboot was the Issue.
So we set up a Monitoring on the Process mfeatp for all Systems (Since it´s a Process and not a Service it wasn´t monitored up untill now) And well the result was a bit of a shock, there were lot of Systems that had rebooted recently and still experience the issue....

 

The Windows Application Eventlog is full of EventID: 1000 Definetly more than 10...

Faulting application name: mfeatp.exe, version: 10.7.0.2059, time stamp: 0x5ee85144
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000000001174
Faulting process id: 0xba0
Faulting application start time: 0x01d6b19d1b4b613a
Faulting application path: C:\Program Files\McAfee\Endpoint Security\Adaptive Threat Protection\mfeatp.exe
Faulting module path: unknown
Report Id: 5f573336-1d90-11eb-8100-ecf4bbcfe8aa
Faulting package full name:
Faulting package-relative application ID:

 

There is an Article for 10.5,10.6 updated on 8th of Oct 2020 "Adaptive Threat Protection service (mfeatp.exe) crashes and restarts automatically" but not for 10.7
KB91501

5 Replies
yaz
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 6

Re: Adaptive Threat Protection service (mfeatp.exe) crashes and restarts automatically in 10.7

Hi @PeDe 

Thanks for reaching out to our community. 

As the issue is seen with the latest version of McAfee ENS ATP, we might need to see if there is any known issues with the drivers conflicting with Windows or such.

I suggest you can raise an SR and provide us with MER, Process monitor,AMTRACE and WPR as per below KB for our discussion with our Engineering. 

https://kc.mcafee.com/corporate/index?page=content&id=KB86691

We dont find any known issues as well.

https://kc.mcafee.com/corporate/index?page=content&id=KB88788

So we need to check this with our Engineering and provide further updates as issue is happening with latest ENS. 

 

 

Re: Adaptive Threat Protection service (mfeatp.exe) crashes and restarts automatically in 10.7

I am seeing this issue on 60 devices (approximately 6% of my deployment.

I recently pushed out the ENS 10.7 November update and I began to see that the Threat Prevention Module did not update on most of these. On some, all of the modules updated, yet the current version of ATP content did not update. Upon reboot, ATP would fail and the application event log would generate a "1000 Event ID error associated with "Faulting application name: mfeatp.exe,"

The status of ATP would flip flop from disabled to enabled briefly every 30 minutes. So far, the only fix was an uninstall, reboot and reinstall.

 

 

PeDe
Level 7
Report Inappropriate Content
Message 4 of 6

Re: Adaptive Threat Protection service (mfeatp.exe) crashes and restarts automatically in 10.7

Yes currently it´s the only way to unistall agent & products, restart, install, reboot

when it was clean installed the issue didn´t reappear again...

Singularety
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 6

Re: Adaptive Threat Protection service (mfeatp.exe) crashes and restarts automatically in 10.7

Same issue:

 

Description:
Faulting application name: mfeatp.exe, version: 10.7.0.2481, time stamp: 0x5f886a2c
Faulting module name: rc.dat, version: 1.1.0.8209, time stamp: 0x603cc6f4
Exception code: 0xc0000005
Fault offset: 0x0000000000366e97
Faulting process id: 0x1c2c
Faulting application start time: 0x01d7401c2cd34fb6
Faulting application path: C:\Program Files\McAfee\Endpoint Security\Adaptive Threat Protection\mfeatp.exe
Faulting module path: C:\Program Files\Common Files\McAfee\Engine\content\rp\1.1.0.8209\x86_64\rc.dat
Report Id: 7fac1065-10ca-4e4f-8bfa-e118a09f5300
Faulting package full name:
Faulting package-relative application ID:

DH
ZeeArhaan
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 6

Re: Adaptive Threat Protection service (mfeatp.exe) crashes and restarts automatically in 10.7

Hello @Singularety 

Thank you for reaching us back, seems like this issue is fixed in the ENS: 10.7 April update 2021, see the release notes link below of the same.

https://docs.mcafee.com/bundle/endpoint-security-10.7.x-release-notes/page/GUID-5F4E0ACD-5710-4AF1-9...

Adaptive Threat Protection
Component Reference Resolution
Installation ENSW-109439, ENSW-109579 Resolves an issue where ATP repeatedly crashes on installation due to rc.dat.

 

Currently, you are on ENS: 10.7 Nov update 2020, perhaps upgrading your ENS version to 10.7 April update 2021 may resolve your issue.

Thanks

Was my reply helpful?
If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a solution" if this reply resolves your query!
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community