Endpoint Security mfetp.exe crashes at module MSVCR100.dll

Technical Articles ID: KB91409
Last Modified: 2/15/2022

Environment

Endpoint Security (ENS) Threat Prevention 10.x

Problem

The application mfetp.exe stops and starts repeatedly, and registers multiple Application Events with Event ID 1000 in the Windows Event Viewer.

The following is an example of an event from the Windows Application Event Log:

Source: Application Error
Category: Application Crashing Events
Event ID: 1000
Data:

Faulting application name: mfetp.exe.
Version: <ENS_version>
Time stamp: <time_stamp>
Faulting module name: MSVCR100.dll.
Version: <VC_Version>.
Time stamp: <time_stamp>
Exception code: 0xc0000005
Fault offset: 0x000000000005a2f3
Faulting process id: 0x299c

Cause

The Exploit Prevention module in ENS Threat Prevention has a limit of 50 executables configured for each Exploit Prevention application protection rule. When it exceeds 50 executables, it causes the mfetp.exe application to crash.

Solution

Technical Support is investigating this issue. As a temporary measure, implement the following workaround.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Workaround

Modify the Exploit Prevention application protection rule so that it has a maximum of 50 executables.

Affected Products

Endpoint Security Threat Prevention 10.7.x
Endpoint Security Threat Prevention 10.6.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Endpoint Security mfetp.exe crashes at module MSVCR100.dll

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Endpoint Security mfetp.exe crashes at module MSVCR100.dll

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title