Endpoint Protection

 View Only
Expand all | Collapse all

SYMEFA64.SYS blue screen

  • 1.  SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 08:41 AM

    Hi,

     

    One of our users has just experienced a blue screen on a newly configured and supplied laptop caused by the above driver. The bug check string states BAD_POOL_HEADER.

     

    Regards

     

    Leon



  • 2.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 08:43 AM

    And my question was could anbody please advise further on this issue and have any recommendations??



  • 3.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 09:03 AM

    Well what version of SEP? What components installed?

     What OS are you running?

    Do you have a full dump of the BSOD? If so you should call support as they will be the ones to analyse and assist you further on this issue.

    Check this thread to see if it's similar to what you describe:

    https://www-secure.symantec.com/connect/forums/app-v-application-delayed-start-sep-12



  • 4.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 09:19 AM

    Version 11.0.5002.333 Windows 7 64bit.

    All three components are installed.

    I have a minidump related to this and was going to contact support however usually whenever I post on any of these forums I get a good response. 

    And I have already searched the knowledge base but cannot seem to find anything thats related for that version of SEP



  • 5.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 09:25 AM

    First off, the version you're running is pretty old. The latest for 11.x is RU7 MP3. So my recommendation would be to upgrade asap if you can. Support will also recommend this as well.

    Now I remember there was a big issue in 11.0.5 related to the application and device control component. Removing that component and trying again may stop the BSOD from happening. I would suggest doing this.

    Also, here are the release notes for all versions of 11.x so there may be a fix in a later version:

    http://www.symantec.com/business/support/index?page=content&id=TECH103087

     



  • 6.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 09:30 AM

    Brian,

     

    please accept my apologies the version number is 12.1.1000.157 RU1.......

     

    Regards

     

    Leon



  • 7.  RE: SYMEFA64.SYS blue screen
    Best Answer

    Posted Nov 22, 2012 09:40 AM

    The latest version is 12.1 RU2 so you're still 2 versions behind.

    Looking at the release notes for 12.1 RU1 MP1, I found this:

     

    Bugcheck 9F (DRIVER_POWER_STATE_FAILURE) references SYMEFA64.SYS
    Fix ID: 2636799
    Symptom: The SEP client experiences a blue screen with bugcheck 9F (DRIVER_POWER_STATE_FAILURE). The blue screen references faulting driver SYMEFA64.SYS.
    Solution: The SymEFA64.sys driver was modified to prevent this crash.
     
    So you can either upgrade to 12.1 RU1 MP1 or go right to 12.1 RU2. I would suggest upgrading to 12.1 RU2.


  • 8.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 10:12 AM

    Brian,

     

    Many thanks for your help. I was Obviously looking under the release notes for the wrong version!

    I will try this now. and report back.

     

    Regards

     

    Leon



  • 9.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 10:14 AM

    Here's a link to release notes for all versions of SEP:

    http://www.symantec.com/business/support/index?page=content&id=TECH163829



  • 10.  RE: SYMEFA64.SYS blue screen

    Broadcom Employee
    Posted Nov 22, 2012 10:40 AM

    Hi,

    Upgrade to the latest version i.e. SEP 12.1 RU2 OR  RU1 MP1 is the possible solution.

    You can download SEP 12.1 RU2 at https://fileconect.symantec.com



  • 11.  RE: SYMEFA64.SYS blue screen

    Posted Nov 22, 2012 11:10 AM

    Chetan,

     

    i am unable to follow that link. Please advise.

     

    Leon



  • 12.  RE: SYMEFA64.SYS blue screen

    Broadcom Employee
    Posted Nov 22, 2012 11:19 AM

    HI,

    I do apologies for that, there was a typo mistake, here it go https://fileconnect.symantec.com

    Check this article to know more about it.

    https://www-secure.symantec.com/connect/articles/understanding-downloads-symantec-endpoint-protection-sep-121-available-symantec-fileconnect