Video Screencast Help

Event ID: 7026(Teefer3) error

Created: 17 Dec 2012 • Updated: 01 Jan 2013 | 11 comments

Has anyone seen this issue on 64bit W2K8 R2 Server:

 

The folloing boot-start or system-star driver(s) failed to load:

Teefer3

 

We only have AV & Antispyware installed. Nothing else? Seems after the reboots this occurs?

 

SEP 11.7 RU 2.

 

Also seems to cause the server after about 2 hours to lock up, not sure if this is related?

 

Any advice or assistace requsted on this.

 

Thanks,

 

 

 

Comments 11 CommentsJump to latest comment

.Brian's picture

Do you have other components installed but not enabled by policy?

Can you share a screenshot?

Did you upgrade from a previous version of SEP?

Check this KB article:

https://www.symantec.com/business/support/index?pa...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

usacc23's picture

1. Policy is NOT enabled

2. Removed NTP months ago.

Here is the the System Log.

AttachmentSize
Teefer3.docx 37.43 KB
.Brian's picture

If you go into Device Manager and under View select Show Hidden Devices, do you see anything relating to Teefer under Non-Plug and Play Drivers?

Open a command prompt and type "sc query teefer" without quotes

What shows?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

usacc23's picture

I found under Non-Plug and Play Drivers:

Symantec Endpoint Protection Firewall

It looks Like I can uninstall it and Current Status is:

This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Running "sc query teefer recieved the following:

[SC] EnumQueryServicesStatus:OpenService FAILED 1060:

The specified service does not exist as an installed service.

Hope that helps?

Ideas?

 

 

 

 

.Brian's picture

Check this KB article, specifically the pieces on removing the teefer2 driver from the registry:

https://www.symantec.com/business/support/index?pa...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

I would suggest you to work on the steps provided in the document of SEP Client via Manual Uninstall

How to manually uninstall the Symantec Endpoint Protection client from Windows Vista, Windows 7, and Windows 2008 R2 64-bit

http://www.symantec.com/docs/TECH91038

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

P_K_'s picture

Query for teefer3 and see

sc query teefer3
 

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

usacc23's picture

Wouldn't a Cleanwipe be easier on this?

 

I appreciate this, but my gosh, this is a Production VM and we are 100% VM. This would be tedious.

What do you think?

 

 

.Brian's picture

I don't want you to uninstall the entire client, just pointing out the removal part regarding the teefer driver

But if you can use Cleanwipe than by all means do it. Wasn't sure if you could in a prod environment but if you can than go for it.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

usacc23's picture

Thanks,

To me that would be the simpiliest way. Especially since it would then be a Clean Reinstall.

 

Of Course I would check the Device Manager then I if still there after a Cleanwipe, I would uninstall it.

While I love Cleanwipe, I have come to learn, it tend NOT to remove everything, but like 99%.

 

Thanks for your help on this.

 

 

 

.Brian's picture

I usually suggest cleanwipe but in a lot of cases it just can't be run on a production server without doing some sort of outage notice...but it's usually the best bet when there is an issue with an install.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.