Video Screencast Help

BSOD Manual removal/fix for teefer2.sys

Created: 23 Apr 2013 | 6 comments

  Running SEP 12.0 on Win7 Pro 64 on a brand new Dell Vostro 2520.  Getting BSOD for

teefer2.sys.  I've seen several references to a 'manual removal' or bypass. 

But none of them actually give the procedure!  For instance - aren't there some "settings

changes" I can do that will bypass the problem (for now)?

  Several say "upgrade to 12.1" but I don't find a way to "upgrade".  Shouldn't a

LiveUpdate bring me up to that level? (It does not.)   Or do I have to buy 12.1?

                                                                                         - thanks ... Jim

Operating Systems:

Comments 6 CommentsJump to latest comment

Swapnil khare's picture

Liveupdate is only for SEP Virus definitions which is released thrice a day . This wont upgrade you SEP Client or SEP manager.

You are entitled to download 12.1 if you are already licensed and this can be downloaded from using you license number which usually starts with M and then alpha numeric numbers.

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Swapnil khare's picture

There is a tool available with Symantec

"Remove Teefer" is the name, open a case with symantec and you can get this tool and this is an unsupported tool.

Take Registry and other backups of software if you are using this tool to remove teefer 2.

Or you can follow the article below and look for teefer 2 in registry entries as posted in the article and it should be done. Note Teefer is listed with NIC you may have to reinstall the NIC drivers

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Brɨan's picture

Is this a managed or unmanaged version?

You can go to and enter in your serial number to get the latest version.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Swapnil khare's picture

All i would say is for temporary solution would be not to install NTP as a feature on this Server for which you will have to create a package without NTP in SEP and then deploy it over . This should remove teefer driver

or remove SEP completely as mentioned in above article and then only install AV AS and PTP feature of SEP on this machine.

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Old Rocky's picture

  I'm actually running SBE 12.0.1 of SEP.  Can't find any key/password. 

  Prior versions of SEP did not 'only update virus defs' during LiveUpdate.

It also updated the software from time to time.  And I think 12.0 is the same.

I'm not saying it will change to 12.1 that way ... just that LU does more

than just the virus defs.

Swapnil khare's picture

Contact your Sales Representative they will give you the Key to download the Software

The upgrade which you have mentioned through live update is correct howver only happens if the setting is set by SEP administrator to upgrade clients manually.

I personally would recommend to download it first from fileconnect and then upgrade it . You may like to open a webcase with Symantec to get the key number .

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.