You are currently offline, waiting for your internet to reconnect

Msftefd.exe process crashes if an email attachment has an unexpected file name extension or no file name extension in an Exchange Server 2010 environment

Symptoms
Consider the following scenario:
  • You have an environment that has Update Rollup 4 for Microsoft Exchange Server 2010 Service Pack 2 (SP2) or a later update rollup that is earlier than Update Rollup 6 installed. 
  • You send an email message that contains an attached Open Office XML document (for example, a .pptx or .docx document) that is missing a file name extension. 
In this scenario, the Microsoft Full-Text Engine Filter Daemon (Msftefd.exe) process crashes. Additionally, the following events are logged on the Mailbox server:

Source: MSExchange Common
Date: Date
Event ID: 4999
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
Watson report about to be sent for process id: Process ID, with parameters: E12, Build Type, Version Number, ExMSFTE, M.E.Search.ExSearch, M.E.S.Crash.CrashNow, M.E.Common.FailFastException, XXXX, Version Number.
ErrorReportingEnabled: False


Log Name: Application
Source: MSFTESQL-Exchange
Date: Date
Event ID: 64772
Task Category: MSFTESQL Service
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
The filter daemon process MSFTEFD exited unexpectedly.


Log Name: Application
Source: MSFTESQL-Exchange
Date: Date
Event ID: 1053
Task Category: MSFTESQL Service
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
The system exception c000010a was raised at 000007FEF99D0F16.

Cause
This issue occurs because the incorrect file name extension causes a crash when the Exchange search engine indexes the email message.
Resolution
To resolve this issue, install the following update rollup:
2746164 Description of Update Rollup 6 for Exchange Server 2010 Service Pack 2
Workaround
To work around this issue, follow these steps:
  1. Click Start, click Run, type regedit in the Open box, and then click OK.
  2. Locate and then select the following registry subkey:
    HKEY_LOCAL_MACHINE\Software\Microsoft\ExchangeServer\v14\ExSearch
  3. On the Edit menu, point to New, and then click DWORD (32-bit) Value.
  4. Type NeverOverrideAttachmentExtension, and then press Enter.
  5. In the Details pane, right-click NeverOverrideAttachmentExtension, and then click Modify.
  6. In the Value data box, type 1, and then click OK.
  7. Exit Registry Editor.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More information
For more information about the Msftefd.exe process, go to the following website:For more information, click the following article number to view the article in the Microsoft Knowledge Base:
2713339 Multi-Mailbox Search feature returns incorrect results when you perform a complex discovery search in an Exchange Server 2010 environment
Properties

Article ID: 2776259 - Last Review: 02/20/2013 09:05:00 - Revision: 3.0

Microsoft Exchange Server 2010 Service Pack 2

  • kbsurveynew kbexpertiseinter kbfix kbqfe KB2776259
Feedback
ml>ta');m.name='ms.dqp0';m.content='true';document.getElementsByTagName('head')[0].appendChild(m);" onload="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?"> ml>>