Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

SYSCORE.15.1.0.668 16.44%
SYSCORE.15.1.0.666 0.44%
SYSCORE.15.1.0.649 1.33%
SYSCORE.15.1.0.641 5.78%
SYSCORE.15.1.0.631 1.33%
SYSCORE.15.1.0.609 0.44%
SYSCORE.15.1.0.609 0.44%
SYSCORE.15.1.0.595 7.11%
SYSCORE.15.1.0.595 22.67%
SYSCORE.15.1.0.594 3.11%
SYSCORE.15.1.0.594 4.89%
SYSCORE.15.1.0.588 14.67%
SYSCORE.15.1.0.588 0.44%
SYSCORE.15.1.0.580 0.44%
SYSCORE.15.1.0.580 0.44%
SYSCORE.15.1.0.563 0.44%
SYSCORE.15.1.0.526 0.44%
SYSCORE.15.1.0.526 0.44%
SYSCORE.15.1.0.518 1.33%
SYSCORE.15.1.0.518 5.78%
SYSCORE.15.1.0.518 1.33%
SYSCORE.15.1.0.518 3.11%
SYSCORE.15.0.0.515 1.33%
SYSCORE.14.4.0.503 0.44%
SYSCORE.14.4.0.503 0.44%
View more

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, AllocateAndInitializeSid, FreeSid, SetEntriesInAclW, RegOpenKeyW, QueryServiceStatus, OpenSCManagerW, OpenServiceW, StartServiceW, CloseServiceHandle, PrivilegeCheck, OpenThreadToken, RegOpenKeyExW, RegCloseKey, GetSecurityDescriptorDacl, GetExplicitEntriesFromAclW, GetSidSubAuthority, IsValidSid, GetSidIdentifierAuthority, OpenProcessToken, SetNamedSecurityInfoW, GetNamedSecurityInfoW, EqualSid, LookupPrivilegeValueW, AdjustTokenPrivileges, BuildTrusteeWithSidW, RegQueryValueExW, GetSidSubAuthorityCount, GetTokenInformation, CopySid, GetLengthSid, SetSecurityDescriptorDacl, AddAccessAllowedAceEx, AddAccessDeniedAceEx, InitializeAcl, InitializeSecurityDescriptor, SetServiceObjectSecurity, RegCreateKeyExW
crypt32.dll
CertCreateContext
kernel32.dll
GetFileAttributesExW, GetSystemWindowsDirectoryW, QueryDosDeviceW, GetLogicalDriveStringsW, GetVersion, OpenProcess, ReadFile, SetFilePointer, VirtualProtect, IsBadReadPtr, GetSystemDirectoryW, GetWindowsDirectoryW, GetEnvironmentVariableW, HeapAlloc, HeapFree, GetVersionExA, HeapReAlloc, RaiseException, VirtualFree, VirtualAlloc, HeapDestroy, HeapCreate, GetModuleHandleA, ExitProcess, GetModuleFileNameA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TlsFree, OutputDebugStringA, FreeEnvironmentStringsA, MultiByteToWideChar, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, InitializeCriticalSectionAndSpinCount, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapSize, GetCPInfo, GetACP, GetOEMCP, LCMapStringA, WideCharToMultiByte, LCMapStringW, RtlUnwind, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, GetSystemInfo, VirtualQuery, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, FlushFileBuffers, LocalFree, LocalAlloc, FreeLibrary, GetProcAddress, CreateFileW, ResetEvent, Sleep, LoadLibraryA, SetLastError, GetCurrentThread, DebugBreak, GetStdHandle, WriteFile, TerminateProcess, TlsGetValue, TlsSetValue, TlsAlloc, GetCurrentThreadId, DeleteCriticalSection, InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange, GetModuleHandleW, GetCurrentProcess, GetModuleFileNameW, GetVersionExW, InitializeCriticalSection, CreateThread, CloseHandle, SetEvent, CreateEventW, EnterCriticalSection, LeaveCriticalSection, WaitForSingleObject, DeviceIoControl, GetLastError, LoadLibraryW, GetCommandLineW, InterlockedExchange, FindFirstFileW, FindClose
ntdll.dll
_wcsnicmp
psapi.dll
GetMappedFileNameW, EnumProcessModules, GetModuleInformation
sfc.dll
SfcIsFileProtected

mfevtps.exe

SYSCORE by McAfee (Signed)

Remove mfevtps.exe
Version:   SYSCORE.15.1.0.594
MD5:   ab2d7f16a9745c41297752ab07c98f46
SHA1:   543ef7284630ef4e8f6ae5c4ea8dbadbef6fd74c
SHA256:   26f454d912ff5fcc4903deb335e33be0a78704283bde8c6c7c56cee122fb3643

What is mfevtps.exe?

McAfee Process Validation Service is part of McAfee's core security products. This is a common modules that is shared between a number of McAfee progams.

Overview

mfevtps.exe runs as a service under the name McAfee Validation Trust Protection Service (mfevtp) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:mfevtps.exe
Publisher:McAfee, Inc.
Product name:SYSCORE
Description:McAfee Process Validation Service
Typical file path:C:\Windows\System32\mfevtps.exe
File version:SYSCORE.15.1.0.594
Size:167.95 KB (171,976 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Expiration date:Tuesday, December 31, 2013
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'mfevtp' (McAfee Validation Trust Protection Service)
  • mfevtp

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00094935%
0.028634%
Kernel CPU:0.00041870%
0.013761%
User CPU:0.00053065%
0.014873%
Kernel CPU time:16,685 ms/min
100,923,805ms/min
CPU cycles:2,196,436/sec
17,470,203/sec
Memory
Private memory:5.54 MB
21.59 MB
Private (maximum):5.48 MB
Private (minimum):704 KB
Non-paged memory:5.54 MB
21.59 MB
Virtual memory:37.83 MB
140.96 MB
Virtual memory (peak):48 MB
169.69 MB
Working set:2.09 MB
18.61 MB
Working set (peak):15.59 MB
37.95 MB
Page faults:79,888/min
2,039/min
I/O
I/O read transfer:4.96 KB/sec
1.02 MB/min
I/O read operations:17/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:4.98 KB/sec
448.09 KB/min
I/O other operations:271/sec
1,671/min
Resource allocations
Threads:5
12
Handles:164
600
GUI GDI count:4
103
GUI USER count:2
49

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Windows\System32\mfevtps.exe"
Owner:SYSTEM
Windows Service
Service name:mfevtp
Display name:McAfee Validation Trust Protection Service
Description:“Provides validation trust protection services”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
ADVAPI32.dll
Total CPU:0.10650254%
0.272967%
Kernel CPU:0.05879871%
0.107585%
User CPU:0.04770383%
0.165382%
CPU cycles:2,430,196/sec
5,741,424/sec
Memory:792 KB
1.16 MB
sechost.dll
Total CPU:0.00873530%
Kernel CPU:0.00570024%
User CPU:0.00303506%
CPU cycles:236,845/sec
Memory:100 KB
mfevtps.exe (main module)
Total CPU:0.00007133%
Kernel CPU:0.00007133%
User CPU:0.00000000%
CPU cycles:1,589/sec
Memory:184 KB
ntdll.dll
Total CPU:0.00000507%
Kernel CPU:0.00000507%
User CPU:0.00000000%
CPU cycles:94/sec
Memory:1.23 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 39.50%
Windows 8 15.50%
Windows 8.1 8.50%
Microsoft Windows XP 5.50%
Windows 8.1 Single Language 5.00%
Windows Vista Home Premium 4.50%
Windows 8 Single Language 4.00%
Windows 7 Professional 4.00%
Windows 7 Ultimate 2.50%
Windows 8 Pro with Media Center 2.50%
Windows 8 Pro 2.50%
Windows 7 Starter 2.50%
Windows 8.1 Pro with Media Center 1.00%
Windows 7 Home Basic 1.00%
Windows Vista Ultimate 0.50%
Windows 8 Enterprise 0.50%
Windows 7 Ultimate N 0.50%

Distribution by countryDistribution by country

United States installs about 59.00% of SYSCORE.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 27.98%
ASUS 17.28%
Acer 12.76%
Sony 11.52%
Hewlett-Packard 9.88%
Toshiba 9.88%
Lenovo 5.76%
Intel 3.29%
Alienware 0.82%
GIGABYTE 0.82%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE