The following tables contain the processes that Endpoint Security installs.
Windows Services controlled by Service Control Manager (SCM or services.exe):
| SCM Name |
EXE and Path |
Description |
| McAfee Agent |
| MASVC |
\Program Files\McAfee\Agent\masvc.exe |
McAfee Agent service |
| MACMNSVC |
\Program Files\McAfee\Agent\macmnsvc.exe |
McAfee Agent Common services |
| MACOMPATSVC |
\Program Files\McAfee\Agent\x86\macompatsvc.exe |
McAfee Agent Backwards Compatibility Service |
| Shared |
| MFEFIRE |
\Program Files\Common Files\McAfee\SystemCore\mfefire.exe |
Provides firewall services to McAfee Enterprise products |
| MFEMMS |
\Program Files\Common Files\McAfee\SystemCore\mfemms.exe |
Manages McAfee Enterprise services |
| MFEVTPS |
\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe |
Provides validation trust protection services |
Processes running as a service:
| EXE |
Path |
Description |
| Endpoint Security |
| MCSHIELD |
\Program Files\Common Files\McAfee\AVSolution\ |
McAfee scanner service |
| MFEATP |
\Program Files\McAfee\Endpoint Security\Adaptive threat Protection\mfeatp.exe |
McAfee Adaptive Threat Protection Service |
| MFEESP |
\Program Files\McAfee\Endpoint Security\Endpoint Security Platform\ |
Endpoint Security Platform component hosting server |
| MFECANARY |
\Program Files\Common Files\McAfee\SystemCore\ |
The McAfee Canary process is a short-lived process that terminates five seconds after running.
The process identifies and reports back on DLL injections. |
| MFEENSPPL |
\Program Files (x86)\McAfee\Endpoint Security\Threat Prevention\ |
Provides Protected Process Light (PPL) service |
| MFEFIRE |
\Program Files\Common Files\McAfee\SystemCore\ |
Provides firewall services to McAfee Enterprise products |
| MFEFW |
\Program Files\McAfee\Endpoint Security\Firewall\ |
Firewall Business Object Hosting Server |
| MFETP |
\Program Files\McAfee\Endpoint Security\Threat Prevention\ |
Security component hosting server |
| MFEVTPS |
\Windows\System32\ |
McAfee Process Validation Service |
| MFEHCS |
\Program Files\Common Files\McAfee\SystemCore |
McAfee HookCore Service |
| MFEMACTL |
\Program Files\McAfee\Agent\x86 |
McAfee Agent AAC Host |
| MCCHHOST |
\Program Files (x86)\McAfee\Endpoint Security\x86\Web Control |
McAfee Web Control |
| MFEWC |
\Program Files (x86)\McAfee\Endpoint Security\x86\Web Control |
McAfee Web Control Service |
Endpoint Security Storage Protection processes:
| EXE |
Path |
Description |
| MFEDSP |
\Program Files\McAfee\Endpoint Security\Storage Protection |
McAfee Storage Protection Service |
Processes running as User:
| EXE |
Path |
Description |
| McAfee Agent |
| MCTRAY |
\Program Files\McAfee\Agent\x86\mctray.exe |
McTray Application |
| UPDATERUI |
\Program Files\McAfee\Agent\x86\UpdaterUI.exe |
Common User Interface |
| Endpoint Security |
| MFECONSOLE |
\Program Files (x86)\McAfee\Endpoint Security\Endpoint Security Platform\ |
McAfee Endpoint Security console |
