Endpoint Protection

 View Only
  • 1.  faulting module SYSFER.DLL_unloaded

    Posted Sep 24, 2014 03:11 AM

    Hi,

    I have a old application develop on c++ with Microsoft Visual Studio 6! This application called a c++ DLL (develop with Microsoft Visual Studio 6).

        Old version: [APPLICATION (VS6)] <-> [c++ DLL (VS6) Version1]

    For a new feature I develop a new library on C# (for call a web service, develop with Visual Studio 2010 with Windows 7) and a library wrapper on c++ (develop with Visual Studio 2010 with Windows 7).

        New version: [APPLICATION (VS6)] <-> [c++ DLL (VS6) Version2] <-> [c++ wrapper (VS 2010)] <-> [c# (VS 2010)]

    I have installed:

    Microsoft Visual c++ 2005 Redistributable SP1
    Microsoft Visual c++ 2010 Redistributable SP1
    Microsoft .NET Framework 4.0 Client
    Use "gacutil /i" for .NET C# Library

    I have execute this procedure for all my PC but only some pc don't work fine.

    When I change the [c++ DLL (VS6) Version1] on [c++ DLL (VS6) Version2] I have a problem with some pc.
    I installed this solution on several PCs, but for some, the program crashes (on windows Vista).
    For now I analyzed two computers, the error is this:

    - faulting module SYSFER.DLL_unloaded

    I have modify my library:

        New version: [APPLICATION (VS6)] <-> [c++ DLL (VS6) Version2] <-> [c++ wrapper (VS 2010)]

    But the error is the same (faulting module SYSFER.DLL_unloaded)

    On all PC the antivirus version is:
        Symantec 11.0.7101.1056
    (but only 2 have this problem)

    Where I wrong? I need some other package to be installed (runtime)? Do you have an idea?

    Thank you



  • 2.  RE: faulting module SYSFER.DLL_unloaded



  • 3.  RE: faulting module SYSFER.DLL_unloaded

    Posted Sep 24, 2014 05:49 AM

    Here is a good article describing some background of your issue:

    Creating Application Control Exclusions in Symantec Endpoint Protection 12.1

    http://www.symantec.com/connect/articles/crreating-application-control-exclusions-symantec-endpoint-protection-121

    As explained in this article, only in SEP 12.1 it's possible to create an exception to prevent sysfer.dll from loading. That's bad luck for you, but perhaps a good occasion to upgrade wink



  • 4.  RE: faulting module SYSFER.DLL_unloaded

    Posted Sep 24, 2014 05:57 AM

    Hi,

    on console i launched this command: sc config sysplant start= disabled

    and now the error is changed:

    - faulting module VERSION.dll_unloaded

     

    The strange thing is that with the same versions of symantec on ​​other PCs only two give me this problem!

     

    Thanks



  • 5.  RE: faulting module SYSFER.DLL_unloaded

    Posted Sep 24, 2014 06:01 AM

    Have you try to reinstall sep client ?

    Try to create exclusions as per Cameron_W comments

    https://www-secure.symantec.com/connect/forums/cwindowssystem32sysferdll#comment-7305531

     



  • 6.  RE: faulting module SYSFER.DLL_unloaded

    Posted Sep 24, 2014 06:25 AM

    per greg12, you're best off adding an exception for ADC for this app