Endpoint Protection

 View Only
  • 1.  Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Jun 05, 2014 09:49 AM

    I have the following error:

     

    Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e
    Faulting module name: ntdll.dll, version: 6.3.9600.17031, time stamp: 0x530895af
    Exception code: 0xc0000374
    Fault offset: 0x00000000000f8c9c
    Faulting process ID: 0x2ef0
    Faulting application start time: 0x01cf8088999030a4
    Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4100.4126.105\Bin64\Smc.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report ID: 7438e724-ec80-11e3-80c6-9c8e995dc74f
    Faulting package full name: 

     

    Its runnning on Windows Server 2012 R2.  Can strat the service but after a few hours just crashes.

     

    Could not find any fix online for this, any help would be gratefull. 

    Thanks

     



  • 2.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Jun 05, 2014 09:50 AM

    Is this set as a GUP?

    Link here:

    http://www.symantec.com/docs/TECH213461

    Similar issue here:

    https://www-secure.symantec.com/connect/forums/gup-symantec-management-client-crashing



  • 3.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Jun 05, 2014 09:51 AM

    Is it also a GUP, then its a know issue

    The SMC.exe processes crashes on Symantec Endpoint Protection 12.1 RU4 when Group Update Provider functionality is enabled

    http://www.symantec.com/business/support/index?page=content&id=TECH213461



  • 4.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Jun 05, 2014 10:01 AM

    Yes it is a GUP and does need to be as its a remote server for updating remote clients.

    This is strange as I thought would have been fixed by now as the version I have is newer than the one listed here:

    http://www.symantec.com/business/support/index?page=content&id=TECH213461

     

     



  • 5.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Jun 05, 2014 10:02 AM

    It's a known issue then:

    http://www.symantec.com/docs/TECH213461

    You can follow up with support. It was supposed to be fixed RU4 but doesn't look to be the case.



  • 6.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Jun 05, 2014 10:11 AM

    Yeah just read all that, totally still not fixed even with latest software on. Version: 12.1.4100.4126

     

    Fix needed now Symantec!!!!

     

     



  • 7.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Jun 05, 2014 10:11 AM

    Will need to come in a new release



  • 8.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Sep 09, 2014 11:17 AM

    Hi,

    I have the same issue on a few GUP servers (Windows 2012 R2).

    As a work around I have created an event viewer task to start the smc service and send me an e-mail notification when this happens.

    My work around requires 3 files stored on C\:
    1. cmd file with <start smc -start>
    2. mailsend application (optional)
    3. msg txt file (optional)

    Hopefully Symantec will come with solution for 12.1 RU4 release because the work around is not ideal.

     

     

     

     

     

     

     

     



  • 9.  RE: Faulting application name: Smc.exe, version: 12.1.4100.4126, time stamp: 0x532a1a5e Faulting module name: ntdll.dll

    Posted Sep 09, 2014 11:29 AM

    Thats not a bad idea :)

     

    Im also having the issue on a Windows 2008 R2 box! So frustrating as they are remote remote sites and downloads are slow!