cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 8
Report Inappropriate Content
Message 1 of 5

MFEATP event ID 1001

Hi All,

 

On some servers we are getting event log full of these events, any idea how to get rid of them.

 

Log Name:      Application

Source:        Windows Error Reporting

Date:          2/5/2020 6:46:22 AM

Event ID:      1001

Task Category: None

Level:         Information

Keywords:      Classic

User:          N/A

Computer:      XXX

Description:

Fault bucket , type 0

Event Name: BEX64

Response: Not available

Cab Id: 0

 

Problem signature:

P1: mfeatp.exe

P2: 10.6.1.1473

P3: 5d8124f2

P4: libuv.dll_unloaded

P5: 0.0.0.0

P6: 5d667edd

P7: 0000000000002430

P8: c0000005

P9: 0000000000000008

P10:

 

Attached files:

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8C74.tmp.dmp

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3A4.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3F3.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB401.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB47F.tmp.txt

\\?\C:\Windows\Temp\WERB52.tmp.appcompat.txt

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mfeatp.exe_198eaa78c68e2a385f3a3343a9773c1d5477febb_03f10921_cab_1d5614a5\memory.hdmp

 

These files may be available here:

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mfeatp.exe_198eaa78c68e2a385f3a3343a9773c1d5477febb_03f10921_cab_1d5614a5

 

Analysis symbol:

Rechecking for solution: 0

Report Id: ff8fb155-7885-4b59-963c-add20b1e901b

Report Status: 100

Hashed bucket:

Cab Guid: 0

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Windows Error Reporting" />

    <EventID Qualifiers="0">1001</EventID>

    <Level>4</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-05T05:46:22.223987500Z" />

    <EventRecordID>9549</EventRecordID>

    <Channel>Application</Channel>

    <Computer>XXX</Computer>

    <Security />

  </System>

  <EventData>

    <Data>

    </Data>

    <Data>0</Data>

    <Data>BEX64</Data>

    <Data>Not available</Data>

    <Data>0</Data>

    <Data>mfeatp.exe</Data>

    <Data>10.6.1.1473</Data>

    <Data>5d8124f2</Data>

    <Data>libuv.dll_unloaded</Data>

    <Data>0.0.0.0</Data>

    <Data>5d667edd</Data>

    <Data>0000000000002430</Data>

    <Data>c0000005</Data>

    <Data>0000000000000008</Data>

    <Data>

    </Data>

    <Data>

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8C74.tmp.dmp

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3A4.tmp.WERInternalMetadata.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3F3.tmp.xml

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB401.tmp.csv

\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB47F.tmp.txt

\\?\C:\Windows\Temp\WERB52.tmp.appcompat.txt

\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mfeatp.exe_198eaa78c68e2a385f3a3343a9773c1d5477febb_03f10921_cab_1d5614a5\memory.hdmp</Data>

    <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mfeatp.exe_198eaa78c68e2a385f3a3343a9773c1d5477febb_03f10921_cab_1d5614a5</Data>

    <Data>

    </Data>

    <Data>0</Data>

    <Data>ff8fb155-7885-4b59-963c-add20b1e901b</Data>

    <Data>100</Data>

    <Data>

    </Data>

    <Data>0</Data>

  </EventData>

</Event>

 

 

Thanks

4 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: MFEATP event ID 1001

Hi @Maros,

Thank you for reporting this issue. I can confirm that I have not come across any known issues with respect to this yet. May I know what version you are using? Endpoint Security 10.6.1 December update?

If yes, May I know how frequent you receive this crash? It is best advised in these cases to log a support ticket once you confirm that there are no known issues from here.

*Note: if you are not already on the latest version, please upgrade, confirm the issue still re occurs and then please log a Support ticket just to be sure!

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
Highlighted
Level 8
Report Inappropriate Content
Message 3 of 5

Re: MFEATP event ID 1001

It's actually hundreds of events.

Server is running these versions

Endpoint Security Threat Prevention 10.7.0.1415 
Endpoint Security Platform 10.7.0.1285 
Endpoint Security Adaptive Threat Protection 10.7.0.1531
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: MFEATP event ID 1001

Hi @Maros,

Thank you for your response. I would recommend logging a support request for this. However, i find it very important to determine the severity/impact of the issue.

Does it have any functional impact? Can you perform a Real protect test (It is a component of ATP) there by we can confirm it is not functionally impacting ATP!

Test File:

https://kc.mcafee.com/corporate/index?page=content&id=KB88828

How to test:

https://docs.mcafee.com/bundle/endpoint-security-10.7.x-adaptive-threat-protection-product-guide-win...

Kindly please check if ATP is still functional and log a Service Request accordingly.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
Highlighted
Level 8
Report Inappropriate Content
Message 5 of 5

Re: MFEATP event ID 1001

HI,

 

Test file isn't being detected. I have verified it with your colleague on a call, but looks like it's an issue of 10.7 ENS. He had same peoblem.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community