The genuine mfevtps.exe file is a software component of SYSCORE by McAfee LLC."Mfevtps.exe" is McAfee LLC's "Validation Trust Protection Service", part of the "SystemCore" common to multiple McAfee For Enterprise products, including VirusScan Enterprise. It is a Windows service installed by Endpoint Security in "C:\Program Files\Common Files\McAfee\SystemCore", (or "C:\Windows\System32" in some McAfee literature), which loads when the computer starts. All McAfee processes afterward load only if it permits. McAfee introduced the VTP Service in Host Intrusion Prevention 7.0 Patch 3. The critical "McShield" service depends upon it and it depends on the "mfehidk.sys" driver. VTP uses Microsoft cryptographic API's to create a "trusted relationship" among processes to keep falsely-named malware from executing. McAfee says "it is not meant to ever be stopped." Certain key McAfee processes automatically restart because malware tries to kill them. Founded in 1987 by John McAfee, (now unaffiliated), briefly a subsidiary of Intel, (still owning 49%), McAfee LLC regained standalone status in 2017.
MFEVTPS stands for McAfee For Enterprise Validation Trust Protection Service
