Msftefd.exe process crashes if an email attachment has an unexpected file name extension or no file name extension in an Exchange Server 2010 environment

Article translations Article translations
Article ID: 2776259 - View products that this article applies to.
Expand all | Collapse all

Symptoms

Consider the following scenario:
  • You have an environment that has Update Rollup 4 for Microsoft Exchange Server 2010 Service Pack 2 (SP2) or a later update rollup that is earlier than Update Rollup 6 installed. 
  • You send an email message that contains an attached Open Office XML document (for example, a .pptx or .docx document) that is missing a file name extension. 
In this scenario, the Microsoft Full-Text Engine Filter Daemon (Msftefd.exe) process crashes. Additionally, the following events are logged on the Mailbox server:

Source: MSExchange Common
Date: Date
Event ID: 4999
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
Watson report about to be sent for process id: Process ID, with parameters: E12, Build Type, Version Number, ExMSFTE, M.E.Search.ExSearch, M.E.S.Crash.CrashNow, M.E.Common.FailFastException, XXXX, Version Number.
ErrorReportingEnabled: False


Log Name: Application
Source: MSFTESQL-Exchange
Date: Date
Event ID: 64772
Task Category: MSFTESQL Service
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
The filter daemon process MSFTEFD exited unexpectedly.


Log Name: Application
Source: MSFTESQL-Exchange
Date: Date
Event ID: 1053
Task Category: MSFTESQL Service
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
The system exception c000010a was raised at 000007FEF99D0F16.

Cause

This issue occurs because the incorrect file name extension causes a crash when the Exchange search engine indexes the email message.

Resolution

To resolve this issue, install the following update rollup:
2746164 Description of Update Rollup 6 for Exchange Server 2010 Service Pack 2

Workaround

To work around this issue, follow these steps:
  1. Click Start, click Run, type regedit in the Open box, and then click OK.
  2. Locate and then select the following registry subkey:
    HKEY_LOCAL_MACHINE\Software\Microsoft\ExchangeServer\v14\ExSearch
  3. On the Edit menu, point to New, and then click DWORD (32-bit) Value.
  4. Type NeverOverrideAttachmentExtension, and then press Enter.
  5. In the Details pane, right-click NeverOverrideAttachmentExtension, and then click Modify.
  6. In the Value data box, type 1, and then click OK.
  7. Exit Registry Editor.

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More information

For more information about the Msftefd.exe process, go to the following website:
General information about the Msftefd.exe process
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
2713339 Multi-Mailbox Search feature returns incorrect results when you perform a complex discovery search in an Exchange Server 2010 environment

Properties

Article ID: 2776259 - Last Review: February 20, 2013 - Revision: 3.0
Applies to
  • Microsoft Exchange Server 2010 Service Pack 2, when used with:
    • Microsoft Exchange Server 2010 Standard
    • Microsoft Exchange Server 2010 Enterprise
Keywords: 
kbsurveynew kbexpertiseinter kbfix kbqfe KB2776259

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com