Endpoint Protection

 View Only
Expand all | Collapse all

Windows7 64 bit BSOD - teefer2.sys - Endpoint Protection SBE 12.0.1001.95

  • 1.  Windows7 64 bit BSOD - teefer2.sys - Endpoint Protection SBE 12.0.1001.95

    Posted Nov 14, 2011 01:04 PM

    I get the BSOD about 3 times a week. I've heard that version 12 fixes the issue, but this is not the case. A solution would be greatly appreciated. Thanks!

    Kevin M Cain

    Unable to load image \SystemRoot\system32\DRIVERS\teefer2.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for teefer2.sys
    *** ERROR: Module load completed but symbols could not be loaded for teefer2.sys

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
    This is a very common bugcheck.  Usually the exception address pinpoints
    the driver/function that caused the problem.  Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003.  This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG.  This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG.  This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff880057d0ca1, The address that the exception occurred at
    Arg3: fffff880032308e8, Exception Record Address
    Arg4: fffff88003230140, Context Record Address

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    FAULTING_IP:
    teefer2+4ca1
    fffff880`057d0ca1 384230          cmp     byte ptr [rdx+30h],al

    EXCEPTION_RECORD:  fffff880032308e8 -- (.exr 0xfffff880032308e8)
    ExceptionAddress: fffff880057d0ca1 (teefer2+0x0000000000004ca1)
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 0000000000000000
       Parameter[1]: 000000000003ebe0
    Attempt to read from address 000000000003ebe0

    CONTEXT:  fffff88003230140 -- (.cxr 0xfffff88003230140)
    rax=0000000000000006 rbx=fffffa80083451e8 rcx=fffff88003230ba0
    rdx=000000000003ebb0 rsi=000000000003ebb0 rdi=000000000003ebb0
    rip=fffff880057d0ca1 rsp=fffff88003230b20 rbp=fffff88003230ba0
     r8=0000000000000040  r9=fffff880057ee4e0 r10=fffff880057ee2e0
    r11=0000000000000042 r12=fffffa8006f75000 r13=fffff880057d1740
    r14=0000000000000000 r15=fffff880033f5f40
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    teefer2+0x4ca1:
    fffff880`057d0ca1 384230          cmp     byte ptr [rdx+30h],al ds:002b:00000000`0003ebe0=??
    Resetting default scope

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    PROCESS_NAME:  System

    CURRENT_IRQL:  1

    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    EXCEPTION_PARAMETER1:  0000000000000000

    EXCEPTION_PARAMETER2:  000000000003ebe0

    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d17100
     000000000003ebe0

    FOLLOWUP_IP:
    teefer2+4ca1
    fffff880`057d0ca1 384230          cmp     byte ptr [rdx+30h],al

    BUGCHECK_STR:  0x7E

    LAST_CONTROL_TRANSFER:  from fffff880057db9c8 to fffff880057d0ca1

    STACK_TEXT: 
    fffff880`03230b20 fffff880`057db9c8 : fffff880`03230ba0 fffffa80`06a9c8c0 fffff880`03230ba0 7265726f`00000104 : teefer2+0x4ca1
    fffff880`03230b28 fffff880`03230ba0 : fffffa80`06a9c8c0 fffff880`03230ba0 7265726f`00000104 fffff880`057dbcc6 : teefer2+0xf9c8
    fffff880`03230b30 fffffa80`06a9c8c0 : fffff880`03230ba0 7265726f`00000104 fffff880`057dbcc6 fffff880`057dbcce : 0xfffff880`03230ba0
    fffff880`03230b38 fffff880`03230ba0 : 7265726f`00000104 fffff880`057dbcc6 fffff880`057dbcce fffff880`057d1740 : 0xfffffa80`06a9c8c0
    fffff880`03230b40 7265726f`00000104 : fffff880`057dbcc6 fffff880`057dbcce fffff880`057d1740 00000000`0003ebb0 : 0xfffff880`03230ba0
    fffff880`03230b48 fffff880`057dbcc6 : fffff880`057dbcce fffff880`057d1740 00000000`0003ebb0 fffff880`057d1553 : 0x7265726f`00000104
    fffff880`03230b50 fffff880`057dbcce : fffff880`057d1740 00000000`0003ebb0 fffff880`057d1553 fffff880`057db9c8 : teefer2+0xfcc6
    fffff880`03230b58 fffff880`057d1740 : 00000000`0003ebb0 fffff880`057d1553 fffff880`057db9c8 fffffa80`03ce78d0 : teefer2+0xfcce
    fffff880`03230b60 00000000`0003ebb0 : fffff880`057d1553 fffff880`057db9c8 fffffa80`03ce78d0 00000000`00000080 : teefer2+0x5740
    fffff880`03230b68 fffff880`057d1553 : fffff880`057db9c8 fffffa80`03ce78d0 00000000`00000080 fffff880`057ee4e0 : 0x3ebb0
    fffff880`03230b70 fffff880`057db9c8 : fffffa80`03ce78d0 00000000`00000080 fffff880`057ee4e0 fffff880`057ee2e0 : teefer2+0x5553
    fffff880`03230b78 fffffa80`03ce78d0 : 00000000`00000080 fffff880`057ee4e0 fffff880`057ee2e0 fffff880`057d1680 : teefer2+0xf9c8
    fffff880`03230b80 00000000`00000080 : fffff880`057ee4e0 fffff880`057ee2e0 fffff880`057d1680 fffff880`00000000 : 0xfffffa80`03ce78d0
    fffff880`03230b88 fffff880`057ee4e0 : fffff880`057ee2e0 fffff880`057d1680 fffff880`00000000 fffffa80`06dec380 : 0x80
    fffff880`03230b90 fffff880`057ee2e0 : fffff880`057d1680 fffff880`00000000 fffffa80`06dec380 00000000`00000001 : teefer2+0x224e0
    fffff880`03230b98 fffff880`057d1680 : fffff880`00000000 fffffa80`06dec380 00000000`00000001 00000000`000050d4 : teefer2+0x222e0
    fffff880`03230ba0 fffff880`00000000 : fffffa80`06dec380 00000000`00000001 00000000`000050d4 00000000`00000001 : teefer2+0x5680
    fffff880`03230ba8 fffffa80`06dec380 : 00000000`00000001 00000000`000050d4 00000000`00000001 fffff880`057d178c : 0xfffff880`00000000
    fffff880`03230bb0 00000000`00000001 : 00000000`000050d4 00000000`00000001 fffff880`057d178c 00000000`000050d4 : 0xfffffa80`06dec380
    fffff880`03230bb8 00000000`000050d4 : 00000000`00000001 fffff880`057d178c 00000000`000050d4 fffffa80`06f75000 : 0x1
    fffff880`03230bc0 00000000`00000001 : fffff880`057d178c 00000000`000050d4 fffffa80`06f75000 ffffffff`ff85ee00 : 0x50d4
    fffff880`03230bc8 fffff880`057d178c : 00000000`000050d4 fffffa80`06f75000 ffffffff`ff85ee00 00000000`00000080 : 0x1
    fffff880`03230bd0 00000000`000050d4 : fffffa80`06f75000 ffffffff`ff85ee00 00000000`00000080 fffffa80`0399c040 : teefer2+0x578c
    fffff880`03230bd8 fffffa80`06f75000 : ffffffff`ff85ee00 00000000`00000080 fffffa80`0399c040 fffff800`02d7ffee : 0x50d4
    fffff880`03230be0 ffffffff`ff85ee00 : 00000000`00000080 fffffa80`0399c040 fffff800`02d7ffee 00000000`00000001 : 0xfffffa80`06f75000
    fffff880`03230be8 00000000`00000080 : fffffa80`0399c040 fffff800`02d7ffee 00000000`00000001 fffffa80`071c8b60 : 0xffffffff`ff85ee00
    fffff880`03230bf0 fffffa80`0399c040 : fffff800`02d7ffee 00000000`00000001 fffffa80`071c8b60 00000000`00000080 : 0x80
    fffff880`03230bf8 fffff800`02d7ffee : 00000000`00000001 fffffa80`071c8b60 00000000`00000080 fffffa80`071c8b60 : 0xfffffa80`0399c040
    fffff880`03230c00 fffff800`02ad65e6 : fffff880`033f1180 fffffa80`071c8b60 fffff880`033fbfc0 fffff880`01266cb0 : nt!PspSystemThreadStartup+0x5a
    fffff880`03230c40 00000000`00000000 : fffff880`03231000 fffff880`0322b000 fffff880`03230150 00000000`00000000 : nt!KxStartSystemThread+0x16


    SYMBOL_STACK_INDEX:  0

    SYMBOL_NAME:  teefer2+4ca1

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: teefer2

    IMAGE_NAME:  teefer2.sys

    DEBUG_FLR_IMAGE_TIMESTAMP:  4a0b1ec0

    STACK_COMMAND:  .cxr 0xfffff88003230140 ; kb

    FAILURE_BUCKET_ID:  X64_0x7E_teefer2+4ca1

    BUCKET_ID:  X64_0x7E_teefer2+4ca1

    Followup: MachineOwner



  • 2.  RE: Windows7 64 bit BSOD - teefer2.sys - Endpoint Protection SBE 12.0.1001.95
    Best Answer

    Posted Nov 26, 2011 06:11 PM

    Hi,

    please note that the last SEP release is 12.1.

    SEP 12.0 is not supported on Windows 7, please migrate to SEP 12.1.

    www.symantec.com\docs\TECH163829