Endpoint Protection

Hi All,

I am having an issue with some of my GUPs since Monday night. The SMC services is stopping on its own and when I attempt to restart it stops after about 30-50 seconds. I have 9 gups with the issue and I have 10 gups who do not have the issue. I am on SEP 11.0.6200.530. I have deleted defs, restarted the box, and started gathering the logs. Any help is greatly appreciated.





Here is the error

   Faulting application Smc.exe, version 11.0.6200.530, faulting module msvcr80.dll, version 8.0.50727.762, fault address 0x00014a51.

 Thanks in adasdfasfsafasdfasdf

Hi, This KB might apply to your issue -  Faulting application Smc.exe, version 11.0.6100.480, faulting module GUProxy.plg, fault address 0x00002733.

http://www.symantec.com/business/support/index?page=content&id=TECH150510

I saw that article, but I have some GUPS that are 11.0.6005.562 and they are not having this issue. Anything else it might be? I really do not want to upgrade to RU 7 right now if I can help it.

Thanks

The only other article that comes close is this one for an older version of SEP -

http://www.symantec.com/business/support/index?page=content&id=TECH105670&actp=search&viewlocale=en_US&searchid=1320249625531

Hello Austin ,

My suggestion would be to reinstall this GUP Client .

I have tested a reinstall and it still does the same thing.

What is the event id and log when SMC is stopped ?

Faulting application Smc.exe, version 11.0.6200.530, faulting module msvcr80.dll, version 8.0.50727.762, fault address 0x00014a51.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 53 6d 63   ure  Smc
0018: 2e 65 78 65 20 31 31 2e   .exe 11.
0020: 30 2e 36 32 30 30 2e 35   0.6200.5
0028: 33 30 20 69 6e 20 6d 73   30 in ms
0030: 76 63 72 38 30 2e 64 6c   vcr80.dl
0038: 6c 20 38 2e 30 2e 35 30   l 8.0.50
0040: 37 32 37 2e 37 36 32 20   727.762
0048: 61 74 20 6f 66 66 73 65   at offse
0050: 74 20 30 30 30 31 34 61   t 00014a
0058: 35 31                     51     

I have also tried reinstall c++ redistributables and copying the dlls from a working GUP. No luck.

I dont think this would work have you tried manual removal of sep on this problem pc ?

this would look like length y process but will surely help

http://www.symantec.com/business/support/index?page=content&id=TECH102261

Hi Austin,

          Create a case with Tech support ....

I agree with Optimus, open a case for the issue, and at the same time ask for the Cleanwipe tool to remove and then reinstall the clients The second KB I provided, pointed to running the Cleanwipe on the MR2 build. It might just be all you need to get this issue resolved.

Thanks all. I have already opened a case, but up until this point it has not gotten me anywhere. I have escalated to my TAM, and I am hoping to get some real advice from them soon. Thanks again!

Hi Austin,

       You need to understand, The fix for this issue is RU7 .

what ever work around you try the issue might arise again...

IT seem it is BUG in SEP. Most of them would have escalated the issue .

They have fixed the BUG in the next upgrade.

My suggestion is to Upgrade completely to RU7 or Upgrade those Machines alone right now to fix the Issue.

It is possible to upgrade those machines alone...

Not to point out but i really dont think its a bug and there can be solution for this probably your technical account manager can surely help you