Endpoint Protection

I have been plagued with this BSOD stop code 0x000000c4 since the 19th of April. Originally I had SAV 10x installed when this problem first occurred. I contacted Microsoft Support and they performed a memory dump analysis. They determined that SPBBCDrv.sys was likely the issue and that I should upgrade it. I followed their advice and upgraded to SEP 11 MR4 MP1. I am still experiencing this error. Can anyone lend some support on this issue?

Montana

Hi,

spbbcdrv is responsible for tamper protection.

Many a times, even after successfull upgrade of version,the driver version may not change.It will still be using an old driver.

On the affected machine, browse to C:\Program Files\Common Files\Symantec Shared\SPBBC and open SPBBCDrv.inf in a notepad and check DriverVer.Let us know the driver version so that we can verify if it is the latest one.

.....Barkha

I actually did not do an upgrade but did an complete removal of SAV and then a fresh install of SEP 11 MR4 MP1.

Contents of the SPBBCDrv.inf file:

; SPBBCDrv INF File
;
;
;
; Copyright (c) 2004, Symantec Corporation
;
[Version]
Signature = "$Windows NT$"
Class = "Antivirus"
ClassGUID = {B1D1A169-C54F-4379-81DB-BEE7D88D7454}
Provider = %Symc%
DriverVer= 09/04/2008,3.3.7.14
CatalogFile=SPBBCDrv.cat

[SourceDiskNames]
1 = %Disk1%

[SourceDiskFiles]
SPBBCDrv.sys = 1

[DestinationDirs]
DefaultDestDir = 01, temp.^^^

[SymcInstall]


[DefaultInstall]
CopyFiles = @SPBBCDrv.sys

[DefaultUninstall]

[Strings]
Symc = "Symantec Corporation"
Disk1 = "SPBBCDrv Source Media"

[SourceDisksFiles]
SPBBCDrv.sys=1

[SourceDisksNames]
1="default",,1

Let me know if this helps.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2006081109544248

Cheers,
Thomas

-Go to Device Manager.
-Enable Show hidden device.
-Expand Non-Plun n Play devices
-Select SPBBCDrv and uninstall.
-Repair the Symantec Endpoint Protection Client from add/remove programs.

-Additionally post the related event ID from event viewer.