Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

SYMEFA64.SYS blue screen

Created: 22 Nov 2012 • Updated: 22 Nov 2012 | 11 comments
This issue has been solved. See solution.

Hi,

 

One of our users has just experienced a blue screen on a newly configured and supplied laptop caused by the above driver. The bug check string states BAD_POOL_HEADER.

 

Regards

 

Leon

Comments 11 CommentsJump to latest comment

JDR1990's picture

And my question was could anbody please advise further on this issue and have any recommendations??

.Brian's picture

Well what version of SEP? What components installed?

 What OS are you running?

Do you have a full dump of the BSOD? If so you should call support as they will be the ones to analyse and assist you further on this issue.

Check this thread to see if it's similar to what you describe:

https://www-secure.symantec.com/connect/forums/app...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

JDR1990's picture

Version 11.0.5002.333 Windows 7 64bit.

All three components are installed.

I have a minidump related to this and was going to contact support however usually whenever I post on any of these forums I get a good response. 

And I have already searched the knowledge base but cannot seem to find anything thats related for that version of SEP

.Brian's picture

First off, the version you're running is pretty old. The latest for 11.x is RU7 MP3. So my recommendation would be to upgrade asap if you can. Support will also recommend this as well.

Now I remember there was a big issue in 11.0.5 related to the application and device control component. Removing that component and trying again may stop the BSOD from happening. I would suggest doing this.

Also, here are the release notes for all versions of 11.x so there may be a fix in a later version:

http://www.symantec.com/business/support/index?pag...

 

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

JDR1990's picture

Brian,

 

please accept my apologies the version number is 12.1.1000.157 RU1.......

 

Regards

 

Leon

.Brian's picture

The latest version is 12.1 RU2 so you're still 2 versions behind.

Looking at the release notes for 12.1 RU1 MP1, I found this:

 

Bugcheck 9F (DRIVER_POWER_STATE_FAILURE) references SYMEFA64.SYS
Fix ID: 2636799
Symptom: The SEP client experiences a blue screen with bugcheck 9F (DRIVER_POWER_STATE_FAILURE). The blue screen references faulting driver SYMEFA64.SYS.
Solution: The SymEFA64.sys driver was modified to prevent this crash.
 
So you can either upgrade to 12.1 RU1 MP1 or go right to 12.1 RU2. I would suggest upgrading to 12.1 RU2.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SOLUTION
JDR1990's picture

Brian,

 

Many thanks for your help. I was Obviously looking under the release notes for the wrong version!

I will try this now. and report back.

 

Regards

 

Leon

.Brian's picture

Here's a link to release notes for all versions of SEP:

http://www.symantec.com/business/support/index?pag...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Chetan Savade's picture

Hi,

Upgrade to the latest version i.e. SEP 12.1 RU2 OR  RU1 MP1 is the possible solution.

You can download SEP 12.1 RU2 at https://fileconect.symantec.com

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

JDR1990's picture

Chetan,

 

i am unable to follow that link. Please advise.

 

Leon

Chetan Savade's picture

HI,

I do apologies for that, there was a typo mistake, here it go https://fileconnect.symantec.com

Check this article to know more about it.

https://www-secure.symantec.com/connect/articles/u...

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<