Endpoint Protection

 View Only
  • 1.  The Symantec Endpoint Protection service terminated unexpectedly

    Posted Feb 11, 2016 11:03 AM

    sepmasterservice is shuttingdown on multiple machines

    40+ computers running W7 32bit OS, all from the same OS image(2 years ago) and issues. This is not occuring on other systems.

    Upgraded SEP to 12.1.6.608.6300 = Did not resolve the issue

    Repair has no affect

    Comms update package has no affect

    Ran a script to restart sepmasterservice and the clients finished the upgrade which was apparently not complete. Service still shuts down within a number of hours

    Event viewer details:

    Faulting application name: ccSvcHst.exe, version: 12.12.0.15, time stamp: 0x550cbac0
    Faulting module name: ccEraser.dll, version: 115.2.0.111, time stamp: 0x563d63d3
    Exception code: 0xc0000417
    Fault offset: 0x0024a742
    Faulting process id: 0x3d0
    Faulting application start time: 0x01d164db5f98b3a9
    Faulting application path: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.6608.6300.105\Bin\ccSvcHst.exe
    Faulting module path: C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.6608.6300.105\Data\Definitions\VirusDefs\20160210.052\ccEraser.dll
    Report Id: c1de6289-d0ce-11e5-b6bb-b8ca3aa1188e

     

    Ran Cleanwipe on one system and installed full package. No problems on that system now.

    Looking for a better time saving solution than uninstall and reinstall SEP on all of these clients. I read in one article to stop the service and replace the C:\Program files\Symantec\Symantec Endpoint Protection\ path with working files from another system. Tried this but the files were still in use even though sepmasterservice was shutdown and could not modify them.

    Any ideas or direction will help!

     

    Thanks in advance

     



  • 2.  RE: The Symantec Endpoint Protection service terminated unexpectedly

    Posted Feb 16, 2016 05:53 PM

    I'd run the symhelp tool on one or two affected clients to do additional error checking:

    Troubleshooting computer issues with the Symantec Help support tool



  • 3.  RE: The Symantec Endpoint Protection service terminated unexpectedly

    Broadcom Employee
    Posted Feb 17, 2016 12:57 PM

    I will recommend to log a case with Support becuase issue is occuring with the latest version of SEP. Support will collect logs to investigate it further.
     



  • 4.  RE: The Symantec Endpoint Protection service terminated unexpectedly

    Posted Feb 18, 2016 02:36 PM

    Sounds good, thank you both. I ran the SymHelp tool and got error 1067. Entered a ticket to open a support case but will continue working on it for the time being.

    Found this thread with similar issue: https://www-secure.symantec.com/connect/forums/upgraded-sepm-ru5-error-1067