Endpoint Protection

Hi All,

My Managed SEP CLient v12.1.5 which is installed in my Windows Server 2008 R2 Std. (backup server) is logging this event ID 1000 as per below frequently:

Faulting application name: ccSvcHst.exe, version: 10.2.0.7, time stamp: 0x4e794c48
Faulting module name: SubmissionsEim.dll, version: 12.1.1000.157, time stamp: 0x4eae000c
Exception code: 0xc0000005
Fault offset: 0x00022513
Faulting process id: 0x1534
Faulting application start time: 0x01d034a8059da30e
Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\ccSvcHst.exe
Faulting module path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\SubmissionsEim.dll
Report Id: 8ed74485-a749-11e4-8d18-68b59971f288

 

what's that mean or should I just ignore it ?

 

Do you see any other errors? You can try running a repair and the symhelp tool. May need to call support and provide a full dump to them if it happens again.

Well, somehow the SEP client is working (green dot spotted) but not sure why I got that multiple times in random.

The SEP client can stop and reload its services, essentially fixing itself. The faulting module has to do wtih submissions. Check the client System log to see if anything else shows. Not sure it's much to worry about but you are running an older version, which could have a few bugs in it.

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

This is a known issue with SEP 12.1 RU5 (12.1.5000.5337) version.

Check these articles:

ccSvcHst.exe intermittently crashes after updating Proactive Threat Protection content on January 19, 2015 content

http://www.symantec.com/docs/TECH227716

Enabling or disabling client submissions to Symantec Security Response

http://www.symantec.com/docs/HOWTO81000

 

Please check this.. Its the same error.

 

http://www.symantec.com/docs/TECH227716

John,

Are you using PTP?

no, just the Antivirus component only.

Has the issue re-occurred?