home

mfevtps.exe

SYSCORE.14.1.0.615.x86

McAfee, Inc.

It runs as a separate (within the context of its own process) windows Service named “McAfee Validation Trust Protection Service”. This is installed with multiple programs including McAfee VirusScan Enterprise and McAfee AntiSpyware Enterprise Module.
Publisher:
McAfee, Inc.  (signed and verified)

Product:
SYSCORE.14.1.0.615.x86

Description:
McAfee Process Validation Service

Version:
SYSCORE.14.1.0.615.x86

MD5:
a64018cffcb51f0d926f63abea14e8ee

SHA-1:
37a908dae4f408cef381d0818a2aab950164c881

SHA-256:
dd788caac577ebd33fc69b88e2c2d6b633b504d40e705b0fe5b1096d37a94296

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:02:38 PM UTC  (today)

File size:
69.1 KB (70,728 bytes)

Copyright:
Copyright© 1995-2009 McAfee, Inc. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Windows\System32\mfevtps.exe

Digital Signature
Signed by:
McAfee, Inc.

Authority:
VeriSign, Inc.

Valid from:
9/13/2008 2:00:00 AM

Valid to:
10/10/2011 1:59:59 AM

Subject:
CN="McAfee, Inc.", OU=IIS, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="McAfee, Inc.", L=Santa Clara, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
564A361E168A81A8F3EFAADA332508E1

File PE Metadata
Compilation timestamp:
8/5/2009 5:47:19 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
1536:FI6C6jWHfhfWlLrPFZadqtjWOeUeEsRhaAa2n:2t/hfS2qtjfeUef

Entry address:
0x63C3

Entry point:
E8, 8C, 04, 00, 00, E9, C4, FD, FF, FF, CC, CC, CC, 56, 8B, 44, 24, 14, 0B, C0, 75, 28, 8B, 4C, 24, 10, 8B, 44, 24, 0C, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 08, F7, F1, 8B, F0, 8B, C3, F7, 64, 24, 10, 8B, C8, 8B, C6, F7, 64, 24, 10, 03, D1, EB, 47, 8B, C8, 8B, 5C, 24, 10, 8B, 54, 24, 0C, 8B, 44, 24, 08, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 14, 8B, C8, 8B, 44, 24, 10, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 0C, 77, 08, 72, 0F, 3B, 44, 24, 08, 76, 09, 4E, 2B, 44, 24, 10, 1B...
 
[+]

Entropy:
6.3710

Code size:
23.5 KB (24,064 bytes)

Service
Display name:
McAfee Validation Trust Protection Service

Service name:
mfevtp

Description:
Provides validation trust protection services

Type:
Win32OwnProcess


The file mfevtps.exe has been discovered within the following programs.

McAfee AntiSpyware Enterprise Module  by McAfee, Inc.
Publisher's description - “The McAfee AntiSpyware Enterprise Module is an add-on to the VirusScan Enterprise product that extends its ability to detect and take action on potentially unwanted spyware and cookies.”
www.mcafeesecurity.com
6% remove it
McAfee VirusScan Enterprise  by McAfee, Inc.
McAfee produces an enterprise-level product named VirusScan Enterprise: McAfee has designed this for use on larger networks. It contains features intended to make management of antivirus software on multiple computers easier.
7% remove it
 
Powered by Should I Remove It?

Scan mfevtps.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.