There are 36 versions of mfevtps.exe in the wild, the latest version being SYSCORE.15.1.0.668. It is started as a Windows Service called 'McAfee Validation Trust Protection Service' with the name 'mfevtp' and described as “Provides validation trust protection services”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 163.53 KB. The file is a digitally signed and issued to McAfee by VeriSign. Numerous variations of mfevtps.exe have been installed with both McAfee Parental Controls and Lenovo Patch Utility 64 bit. During the process's lifecycle, the typical CPU resource utilization is about 0.0047% including both foreground and background operations, the average private memory consumption is about 5.15 MB with the maximum memory reaching around 7.67 MB. Addionally, typically read and write I/O disk operations is about 115.31 KB per minute for reads and 0 Bytes per minute for writes.
McAfee Process Validation Service is part of McAfee's core security products. This is a common modules that is shared between a number of McAfee progams.
(Note, the behaviors below are for all versions of mfevtps.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
United States installs about 57.78% of SYSCORE.
