Continuous High CPU use by mfeatp.exe with "Enable Enhanced Script Scanning" enabled

Technical Articles ID: KB92399
Last Modified: 2023-08-18 09:35:18 Etc/GMT

Environment

Endpoint Security (ENS) Adaptive Threat Protection (ATP) 10.7.x

Problem

After you install ENS ATP 10.7.x, you see continuous high CPU usage by the mfeatp.exe process irrespective of monitored process activity.

Cause

The ENS ATP 10.7.x setting Enable Enhanced Script Scanning (includes AMSI) causes this issue.

Solution

The issue with continuous high CPU usage by mfeatp.exe is resolved in Real Protect Engine version 1.1.0.6396. The Real Protect content is automatically updated on the endpoints through the AMCore content package.

Workaround

Disable the option Enable Enhanced Script Scanning (includes AMSI) found within the ENS ATP Options policy.

Affected Products

Endpoint Security Adaptive Threat Protection
Endpoint Security Threat Prevention 10.7.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Continuous High CPU use by mfeatp.exe with "Enable Enhanced Script Scanning" enabled

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Continuous High CPU use by mfeatp.exe with "Enable Enhanced Script Scanning" enabled

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title